-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 13 Jul 2012 22:58:20 -0700 Source: webauth Binary: libapache2-mod-webauth libapache2-mod-webkdc libapache2-webauth libapache2-webkdc libwebauth-perl libwebauth7 libwebauth-dev libwebkdc-perl webauth-tests webauth-utils webauth-weblogin Architecture: source i386 all Version: 4.2.0-1 Distribution: experimental Urgency: low Maintainer: Russ Allbery <rra@debian.org> Changed-By: Russ Allbery <rra@debian.org> Description: libapache2-mod-webauth - Apache modules for WebAuth authentication libapache2-mod-webkdc - Apache modules for a WebAuth authentication KDC libapache2-webauth - Transitional package for WebAuth Apache modules libapache2-webkdc - Transitional package for WebAuth authentication KDC libwebauth-dev - Development files for WebAuth authentication libwebauth-perl - Perl library for WebAuth authentication libwebauth7 - Shared libraries for WebAuth authentication libwebkdc-perl - Perl libraries for WebAuth central login server webauth-tests - Tests for the WebAuth authentication modules webauth-utils - Command-line utilities for WebAuth authentication webauth-weblogin - Central login server for WebAuth authentication Closes: 666861 Changes: webauth (4.2.0-1) experimental; urgency=low . * New upstream release. - Add support for Apache 2.4. (Closes: #666861) - Support for AuthType StanfordAuth has been deprecated, and the corresponding mod_webauthldap support is not available when built against Apache 2.4. - Support use of Kerberos keyring caches for passing delegated credentials from mod_webauth to CGI and embedded code. - Fix merging of mod_webkdc Apache directives in corner cases. - Hopefully fix some problems with orphaned WebLogin login.fcgi and pwchange.fcgi scripts when running under FastCGI. - Significant revisions of the WebAuth Perl module API. - Allow id tokens of type krb5 to omit the subject attribute. - Convert the key and keyring functions in the WebAuth library API to use APR. The signatures of these functions have therefore changed, and keyring manipulation has changed considerably. Some of the APIs have been simplified or renamed. - The webauth_random_bytes, webauth_random_key, webauth_token_create, and webauth_token_parse APIs have been removed - All Perl modules now have POD documentation. * Convert to Apache 2.4 and follow the Apache module policy. - Rename libapache2-webauth to libapache2-mod-webauth and libapache2-webkdc to libapache2-mod-webkdc. Add transitional packages to ease the upgrade. - Use dh_apache2 to handle module and configuration installation. Do not use it for maitnainer script actions, since libapache2-mod-webauth modules have required configuration and can't be enabled by default. - Update the maintainer script actions for the new Apache module policy. - Depend on apache2-dev instead of apache2-threaded-dev. - Remove explicit dependencies on apache2.2-common. - Use apxs, not apxs2. * Mark libwebauth7 and libwebauth-dev Multi-Arch: same and webauth-utils Multi-Arch: foreign. Convert to multiarch library paths. * libwebauth-dev now suggests libapr1-dev since it is required to use the parts of the API that require APR (such as keyring traversal or creating the WebAuth context from an existing APR pool). * Switch to xz compression for the upstream and Debian tarballs and for the data element of the generated binary packages. * Enable parallel builds. * Use dh-autoreconf to always regenerate the build system from source. Link with --as-needed to ensure we don't pick up unnecessary shared library dependencies. * Move single-debian-patch to local-options and patch-header to local-patch-header so that they only apply to the packages I build and NMUs get regular version-numbered patches. * Purging libapache2-mod-{webauth,webkdc} no longer unconditionally removes the contents of /var/lib/{webauth,webkdc}. Instead, known files are removed and then removal of the directory is attempted, ignoring failure if the directory is non-empty. * Update to debhelper compatibility level V9. - Use dpkg-buildflags to set CFLAGS. - Enable bindnow hardening. Leave PIE off for right now. - Simplify all *.install rules to remove debian/tmp and not specify the destination if it echoes the source. * Convert debian/copyright to copyright-format 1.0. Checksums-Sha1: 40b6d3579d0ee70a233e4fd2d4543f411c036b2f 2648 webauth_4.2.0-1.dsc 4b5744c776ced0275629e388945f5d350fd1218a 767000 webauth_4.2.0.orig.tar.xz f1d16a39475edd3fec514506313229bca20964eb 22404 webauth_4.2.0-1.debian.tar.xz 3ed53467336c2fd66213dddab888a9eb12a13726 211914 libapache2-mod-webauth_4.2.0-1_i386.deb 439678795d6ef90c952008bf37d3af5875d3cb6f 91862 libapache2-mod-webkdc_4.2.0-1_i386.deb 7f709eeca0b2f69d7409290bfa0b193da3d562d1 36262 libapache2-webauth_4.2.0-1_all.deb e2c7fbbd933bd73bd2b9befc15eb10a08c0099e0 35642 libapache2-webkdc_4.2.0-1_all.deb c14deb557ffbf267af1145a4ddd52622fcaf7806 118168 libwebauth-perl_4.2.0-1_i386.deb d4e6beed34efbbb7171280d1c1d64523975df2a3 68386 libwebauth7_4.2.0-1_i386.deb aa6d4516e828c9a88bf2a6098211b403b0cfaf2f 82736 libwebauth-dev_4.2.0-1_i386.deb 95b49b0ecbfe0afeeec7fe3d9a94ecae84048ce5 88998 libwebkdc-perl_4.2.0-1_all.deb c4883d3b920bd1c662accc80a91822920b604bae 45488 webauth-tests_4.2.0-1_all.deb 458fbe86ba2757f9bda464fdae1d6cd632592ebe 44970 webauth-utils_4.2.0-1_i386.deb eb6934000c458d28a6e7cd20a873f14308075035 98086 webauth-weblogin_4.2.0-1_all.deb Checksums-Sha256: ff64e4096f749726175e6f7f2d21ee7fd7c88df9e12d53bc4b8597b0a52e223a 2648 webauth_4.2.0-1.dsc 038d0fe090f68a7101638b4d6156b721e6a10ab33f5740767e4ff6f99a59f0cc 767000 webauth_4.2.0.orig.tar.xz 7653a79e2d91683648f0fd170c16d8deca67ce323db47d6bc90ff26008e4b494 22404 webauth_4.2.0-1.debian.tar.xz c2642d22c9810f324e1726f8767ff86afb1da224795dca51ba9f6416ebd604f4 211914 libapache2-mod-webauth_4.2.0-1_i386.deb f18a82ac14822c45b84eb6985a8a9f9203daa2e53d4d711f58b65240ae630527 91862 libapache2-mod-webkdc_4.2.0-1_i386.deb f55b0663fc985fc3164c5da279d609840097e2cf4c9e5416e6dbf744550b9d87 36262 libapache2-webauth_4.2.0-1_all.deb c20ead593ebbfd71756c123314c171db19a317ea2c7379f140bd71ccc25a023e 35642 libapache2-webkdc_4.2.0-1_all.deb 8cba687c87744a680e2081116fba3bc86d1ed34f206a4c602f5edebeb1ea5e67 118168 libwebauth-perl_4.2.0-1_i386.deb ec18f8fead3e717ed4d8a9827bdb3275a483eaeee09754789c3acd7f36903035 68386 libwebauth7_4.2.0-1_i386.deb ba86d0e2d83b71e1fd09ff249e5968e797f05dd5d78ddbd784e903c14448ec60 82736 libwebauth-dev_4.2.0-1_i386.deb 4cd7ff780efd087a4043b00fb10e2d75b3f636c8dd56d6364d3a53d58aa8a9b2 88998 libwebkdc-perl_4.2.0-1_all.deb f77de534cc24a65b330a911cf210f4918b3c1ff36b465f398e456824a49e272c 45488 webauth-tests_4.2.0-1_all.deb 19dae62fe725f6f07727a4ed115356cd5c9a7d74d54f77f8b6105f3168287952 44970 webauth-utils_4.2.0-1_i386.deb 8ee9ba74945025fefb170dcd7fcb605cbaa6a188fbb9e51af5f3e9655bca8004 98086 webauth-weblogin_4.2.0-1_all.deb Files: 09ab35d61fd72ff29641225246672b0f 2648 web optional webauth_4.2.0-1.dsc 48bf40ff18f73315d544c80708738922 767000 web optional webauth_4.2.0.orig.tar.xz 24498cb7f061577de6aa46ec789d226d 22404 web optional webauth_4.2.0-1.debian.tar.xz e7107710fbddc71f24244d0a5338ccce 211914 httpd optional libapache2-mod-webauth_4.2.0-1_i386.deb 53bd1623e35de7baa9e53158f79ee9bf 91862 httpd optional libapache2-mod-webkdc_4.2.0-1_i386.deb ab68d492cb605e920ae166866da166e7 36262 oldlibs extra libapache2-webauth_4.2.0-1_all.deb 459f468fe15b68d66164357eb41e456c 35642 oldlibs extra libapache2-webkdc_4.2.0-1_all.deb 488c76804ebc8ef8e54a5559a2f41a0c 118168 perl optional libwebauth-perl_4.2.0-1_i386.deb 9a42941c4296cc80ac37c95fb24a553b 68386 libs optional libwebauth7_4.2.0-1_i386.deb 71c5edf53cf9d93c5b9ac8e4e869b0c4 82736 libdevel extra libwebauth-dev_4.2.0-1_i386.deb 6adfaebbd3ad3fef741fa169c5d1bbbd 88998 perl optional libwebkdc-perl_4.2.0-1_all.deb 48bab5cf016c32f76878b50028cd2a50 45488 web optional webauth-tests_4.2.0-1_all.deb 85a404ae3f86c81fefdd9f899cd1d79c 44970 web optional webauth-utils_4.2.0-1_i386.deb 67a2e4f93f2d4ca8d75882a2e074f961 98086 web optional webauth-weblogin_4.2.0-1_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAEBCAAGBQJQAQ0UAAoJEH2AMVxXNt51Hx4IAIoNymf/ZBoDleSVDxYqFZSH jRc7Sd2t+Kvfes8S63zBnS/mpt9U6a6XEOIEVqsLsU6s+ktn8VTm4dnr9pm7AGHJ zSkMI8q1w6hUO5QQJVQk18jr7qPXaeufTZ0aLxeVJrbwhSXk+8gfLV+NToptfIWZ HlMTaOurPjSaME8REI/7F137Cm64VLYRviM8+NGM11k4PJY0Ojt8AYUkFVFvo90W /F15iNaqDxYbDdBC0pwFBp4RhjZz9DJBnZTc3H7hL/1W+fQi0jZzRblSVw9B5Cdy N7NTnit0nV00eIHuAaC/yZkj/IQFWnLkYBkCfGZX6EP/lUNazJXlN8Jt+nITLEs= =4epg -----END PGP SIGNATURE-----