-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 19 Dec 2012 20:57:09 -0800 Source: webauth Binary: libapache2-mod-webauth libapache2-mod-webkdc libapache2-webauth libapache2-webkdc libwebauth-perl libwebauth9 libwebauth-dev libwebkdc-perl webauth-tests webauth-utils webauth-weblogin Architecture: source i386 all Version: 4.4.0-1 Distribution: experimental Urgency: low Maintainer: Russ Allbery <rra@debian.org> Changed-By: Russ Allbery <rra@debian.org> Description: libapache2-mod-webauth - Apache modules for WebAuth authentication libapache2-mod-webkdc - Apache modules for a WebAuth authentication KDC libapache2-webauth - Transitional package for WebAuth Apache modules libapache2-webkdc - Transitional package for WebAuth authentication KDC libwebauth-dev - Development files for WebAuth authentication libwebauth-perl - Perl library for WebAuth authentication libwebauth9 - Shared libraries for WebAuth authentication libwebkdc-perl - Perl libraries for WebAuth central login server webauth-tests - Tests for the WebAuth authentication modules webauth-utils - Command-line utilities for WebAuth authentication webauth-weblogin - Central login server for WebAuth authentication Changes: webauth (4.4.0-1) experimental; urgency=low . * New upstream release. - New authorization identity support in all components of WebAuth. - New WebKdcLoginTimeLimit directive for mod_webkdc to control the time limit for multistage login and when a recent login no longer counts towards session factors. - WebAuthForceLogin no longer forces re-authentication if the last authentication was within WebKdcLoginTimeLimit. - WebLogin now optionally supports replay detection and rate limiting of failed login attempts. This support requires a memcached server to store the relevant data. - The WebLogin error template now takes two new parameters for errors related to replays and rate limiting. - Set single sign-on cookies in WebLogin if appropriate even when displaying an error. This fixes looping issues with site restrictions done via the user innformation service. - The WebLogin configuration options @REMUSER_LOCAL_REALMS and @REMUSER_PERMITTED_REALMS replace @REMUSER_REALMS. The latter is supported for backward compatibility. - Multiple fixes for encoding of Kerberos credentials. - Fix mapping of WebKDC error codes to names in WebLogin. - Document the WebAuthRequireSSL directive. - webauth_token_{encrypt,decrypt} are now part of the public API. - webauth_base64_*, webauth_hex_*, webauth_attr_*, and webauth_attrs_* functions are no longer part of the public API. - The webauth.h header has been removed. Use the more specific webauth/*.h headers. - New public webauth_keyring_encode and webauth_keyring_decode functions and corresponding Perl API to handle keyring serialization without requiring that it be done to a file. - The WA_TK_*, WA_TT_*, and WA_SA_* preprocessor constants are no longer provided. They weren't useful. - The WA_ERR_KEYRING_* error codes have changed to WA_ERR_FILE_* and new error code WA_ERR_FILE_NOT_FOUND has been added. * Update standards version to 3.9.4. - Update Vcs-Git to specify the Debian packaging branch. Checksums-Sha1: 71178a9e66cf6b5bd7fb8089580fdffaaac6ab33 2726 webauth_4.4.0-1.dsc 62325f4a0032b82323c3f6f94682783daf0bce55 804268 webauth_4.4.0.orig.tar.xz afce0f685d5f594a8099a9569b9e333cf13fbfff 23788 webauth_4.4.0-1.debian.tar.xz 7e3533ebae230c6fffd0f2a9f0aa78fb511d2ca3 229112 libapache2-mod-webauth_4.4.0-1_i386.deb 94e8a2af6bfed57e49809199784081a7a3002164 101810 libapache2-mod-webkdc_4.4.0-1_i386.deb 29023fff752e69d64d02336204d23cbb10b0febb 42308 libapache2-webauth_4.4.0-1_all.deb 59cba883a974ffe15ca2a37a75bbf9a042baf5e6 41690 libapache2-webkdc_4.4.0-1_all.deb d43eec421b36796b0564a6d776f455c49f39b4a2 125390 libwebauth-perl_4.4.0-1_i386.deb 39e0419019daaff0fcdda9a1966818635d47796a 71630 libwebauth9_4.4.0-1_i386.deb 09c240d1b5c68617caca66c1e63469e77af7fbb2 84608 libwebauth-dev_4.4.0-1_i386.deb a186f354ffd325953167f0f7494ce2f3c4127d94 98454 libwebkdc-perl_4.4.0-1_all.deb baeb9b99d2f466b3fad8c2d64bf936073324dd72 51564 webauth-tests_4.4.0-1_all.deb ef4b558e532cb08102e0f17e52f8217b01ba2e47 50820 webauth-utils_4.4.0-1_i386.deb 6804d47e66a07e34bd4d6db2bdf07b15f8de71cf 107742 webauth-weblogin_4.4.0-1_all.deb Checksums-Sha256: 8a5b13084508b749974886600aefd80f4ee4e9e789555d14c16b169f08cb9a79 2726 webauth_4.4.0-1.dsc efff3ad67b0709e08a22a2ee006fc91ab0c2ad0ed837647291fbbe38a4ee3269 804268 webauth_4.4.0.orig.tar.xz c7b7688c6a286407793f6b510e788c579ac8b4e5c08fd7dbba212e0ff56ab874 23788 webauth_4.4.0-1.debian.tar.xz a1b83a329794d93b1047993a2fce1f2830a19f06051cc6c3ebf2ee74fe56ac77 229112 libapache2-mod-webauth_4.4.0-1_i386.deb a8e6cc26d4023a69580e318066c795014487876981378ab2d03d94aee32096b8 101810 libapache2-mod-webkdc_4.4.0-1_i386.deb e87a1152a4f8ec1caa558096907bdbff5a79a900b1fa0ae4f3a67b7f25300741 42308 libapache2-webauth_4.4.0-1_all.deb 41eb7394ff13d3c0ed59109a183cad8080cb6a3cc57055cf8c8b0d8f93d75594 41690 libapache2-webkdc_4.4.0-1_all.deb 851aa42afb79fa5229cd3d202623e393c00187dcd92cac11b68133e98f71ece6 125390 libwebauth-perl_4.4.0-1_i386.deb 8098655d037429d02b6cef84ece58ba525809c63f9f541e5e4bff6aa9123b816 71630 libwebauth9_4.4.0-1_i386.deb 0efb7af385c1dd51ce220578e52177a11a8b1c4afcf7623f3b3a5198669eff84 84608 libwebauth-dev_4.4.0-1_i386.deb dad5286b14298619f1497bf8918ac47d848f5e3a817d94ea28072fd28d5f8290 98454 libwebkdc-perl_4.4.0-1_all.deb 15e40cda75d598552866c241c5be55ed29e42657299c5487643695868a40494e 51564 webauth-tests_4.4.0-1_all.deb 776a32e45ff855a18510e62c2ad1dd3e022883cd60bac991496ddf4e827f7421 50820 webauth-utils_4.4.0-1_i386.deb c7ed28dde60f0b2a6805d3a47ab1437ad94365608156b61c7192b32f6ae514f1 107742 webauth-weblogin_4.4.0-1_all.deb Files: dccf721c0fc255732a87a7324aa65a78 2726 web optional webauth_4.4.0-1.dsc b7a7c3b0fb42aada1d1f36b55a60ee81 804268 web optional webauth_4.4.0.orig.tar.xz c45f98bafe3a07853bf6103d88e91042 23788 web optional webauth_4.4.0-1.debian.tar.xz 95138a47239670a0e13bb8bc905f3e3b 229112 httpd optional libapache2-mod-webauth_4.4.0-1_i386.deb d496cd7d8773380b4841f8891f2fa9df 101810 httpd optional libapache2-mod-webkdc_4.4.0-1_i386.deb 1d0779d8398f5615e269fe72a1147155 42308 oldlibs extra libapache2-webauth_4.4.0-1_all.deb a4bce84590136b76dc8c5393c25f6f38 41690 oldlibs extra libapache2-webkdc_4.4.0-1_all.deb ef303121f26b15e5298d314cf9dab947 125390 perl optional libwebauth-perl_4.4.0-1_i386.deb 55792334fcf5dc3e0a1b3f1b6c7a292e 71630 libs optional libwebauth9_4.4.0-1_i386.deb 47a3bc13ac74962aa4caf4ef5d63e9e8 84608 libdevel extra libwebauth-dev_4.4.0-1_i386.deb 8d73976a9fc7725dc14afee1ece7fad7 98454 perl optional libwebkdc-perl_4.4.0-1_all.deb deeb885a51df8115fe44bcda53a25040 51564 web optional webauth-tests_4.4.0-1_all.deb 2b62e32406f130c5d35c3140487e7850 50820 web optional webauth-utils_4.4.0-1_i386.deb 0d56dc555cc41ab3abd8588ca28b5930 107742 web optional webauth-weblogin_4.4.0-1_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAEBCAAGBQJQ0raeAAoJEH2AMVxXNt51120H/1zuGfxtTcLCJlpHU8DVAJyl oY58/Bg3yBTaCaOWigKYZ6UxfE/6yN7FqkMVm7D3pb+KD6Rqeh/QwwVBv/KFZrcn FGUaGyH1sN+WsIPRuEc2z8zF4B3uYgGFmctEId8arFajjrmsUDwTTsYs0r/iYOPT e88egymPLe0ktkxBGeRUEY7y062bs07RUcGRDssvs7ikVuCGi9Nb3xWPfPViBSO8 LHGUMyBgle7eWscvNsEKpxcW4JCY5UoYM1cTHOieBgzLg65qKdgOAg6U1TAE7DBc TmCa4tzPaJ3PsGgLS1ea//pEhHrV4lgIW4zc2R4BIOMRPfsj/e9VtSsl5LqyLtM= =3Nqb -----END PGP SIGNATURE-----