|
|
 |
|
|
Changelog for pam_krb5-debuginfo-2.1.17-1.x86_64.rpm :
Fri Aug 3 00:00:00 2007 Nalin Dahyabhai - 2.1.17-1
- convert \"external\" creds to v4 creds if we\'re supposed to (#201265)
Thu Jul 26 00:00:00 2007 Nalin Dahyabhai - 2.1.16-1
- backport the \"pwhelp\" option (#230468)
- always display the server-supplied error if password-changing fails (#230439)
- link the module with libpam to avoid potential undefined symbol deps on
libpam (#227097)
- don\'t return failure from pam_sm_chauthtok() for unknown users (#235020)
- always reap the storetmp helper\'s exit status properly (#213407)
- update our principal name using \"external\" v5 creds so that if we convert
them to v4 creds we\'ll have the right principal name (part of #201265)
- treat client-revoked errors like client-unknown errors (#230443)
- provide a prompting callback so that libkrb5 can warn of impending password
expiration (#230436)
- when changing passwords, save the user\'s answers properly (#230445)
- don\'t try to validate password-changing credentials, because they\'re not
TGTs (#230460)
Thu Jan 26 23:00:00 2006 Nalin Dahyabhai - 2.1.15-2
- rebuild
Thu Jan 26 23:00:00 2006 Nalin Dahyabhai - 2.1.15-1
- doc fixes
Thu Jan 26 23:00:00 2006 Nalin Dahyabhai - 2.1.14-1
- don\'t log debug messages that we\'re skipping session setup/teardown unless
debugging is enabled (#179037, part of #202190)
- try to build the module with -Bsymbolic if we can figure out how to do
that (#202190)
Mon Jan 16 23:00:00 2006 Nalin Dahyabhai - 2.1.13-2
- rebuild
Mon Jan 16 23:00:00 2006 Nalin Dahyabhai - 2.1.13-1
- backport the \"external\" option from the 2.2 branch
Mon Jan 16 23:00:00 2006 Nalin Dahyabhai - 2.1.12-2
- rebuild
Mon Jan 16 23:00:00 2006 Nalin Dahyabhai - 2.1.12-1
- in the event of a failure to change passwords, provide the user with the
server-supplied information about why it failed
Wed Jan 11 23:00:00 2006 Nalin Dahyabhai
- fix a couple of missing #include statements
Mon Nov 21 23:00:00 2005 Nalin Dahyabhai - 2.1.11-1
- don\'t leak the keytab descriptor during validation (#173681)
Tue Nov 15 23:00:00 2005 Nalin Dahyabhai - 2.1.10-1
- update to 2.1.10
Thu Oct 6 00:00:00 2005 Nalin Dahyabhai - 2.1.9-2
- rebuild
Thu Oct 6 00:00:00 2005 Nalin Dahyabhai - 2.1.9-1
- fix ccache initialization after the password is changed (#169966)
Thu Aug 4 00:00:00 2005 Nalin Dahyabhai - 2.1.8-2
- rebuild
Thu Aug 4 00:00:00 2005 Nalin Dahyabhai - 2.1.8-1
- backport ccache-refresh-on-setcred-with-reinitialize from HEAD (#153257)
- return PAM_USER_UNKNOWN from account management if we didn\'t participate in
authenticating the user (#164794)
Thu May 19 00:00:00 2005 Nalin Dahyabhai - 2.1.7-3
- rebuild
Thu May 19 00:00:00 2005 Nalin Dahyabhai - 2.1.7-2
- rebuild
Thu May 19 00:00:00 2005 Nalin Dahyabhai - 2.1.7-1
- update to 2.1.7
- install afs5log and its man page
- fix detection of the realm of foreign cells with newer OpenAFS
- also try AFS principal = afsAATTREALM for foreign cells in foreign realms
Wed Mar 16 23:00:00 2005 Nalin Dahyabhai - 2.1.5-1
- update to 2.1.5
Mon Feb 28 23:00:00 2005 Nalin Dahyabhai - 2.1.4-1
- update to 2.1.4
Fri Feb 25 23:00:00 2005 Nalin Dahyabhai - 2.1.3-1
- update to 2.1.3
Tue Aug 31 00:00:00 2004 Nalin Dahyabhai - 2.1.2-1
- update to 2.1.2
Tue Jun 22 00:00:00 2004 Nalin Dahyabhai - 2.1.1-1
- update to 2.1.1
Thu Apr 22 00:00:00 2004 Nalin Dahyabhai - 2.1.0-1
- update to 2.1.0
Tue Mar 23 23:00:00 2004 Nalin Dahyabhai - 2.0.11-1
- update to 2.0.11
Tue Mar 16 23:00:00 2004 Nalin Dahyabhai - 2.0.10-1
- update to 2.0.10
Tue Mar 16 23:00:00 2004 Nalin Dahyabhai - 2.0.9-1
- update to 2.0.9
Tue Mar 16 23:00:00 2004 Nalin Dahyabhai - 2.0.8-1
- update to 2.0.8
Wed Mar 10 23:00:00 2004 Nalin Dahyabhai - 2.0.7-1
- update to 2.0.7
Fri Feb 27 23:00:00 2004 Nalin Dahyabhai - 2.0.6-1
- update to 2.0.6
Tue Feb 24 23:00:00 2004 Harald Hoyer - 2.0.5-3
- rebuilt
Tue Nov 25 23:00:00 2003 Nalin Dahyabhai 2.0.5-2
- actually changelog the update to 2.0.5
Tue Nov 25 23:00:00 2003 Nalin Dahyabhai 2.0.5-1
- update to 2.0.5
Sat Oct 11 00:00:00 2003 Nalin Dahyabhai 2.0.4-1
- update to 2.0.4
Sat Sep 20 00:00:00 2003 Nalin Dahyabhai 2.0.3-1
- update to 2.0.3
Sat Sep 6 00:00:00 2003 Nalin Dahyabhai 2.0.2-1
- update to 2.0.2
Fri Aug 15 00:00:00 2003 Nalin Dahyabhai 2.0.1-1
- update to 2.0.1
Sat Aug 9 00:00:00 2003 Nalin Dahyabhai 2.0-1
- update to 2.0
Thu Jan 30 23:00:00 2003 Nalin Dahyabhai 1.60-1
- fix uninitialized pointer crash reading cached return values
Wed Jan 29 23:00:00 2003 Nalin Dahyabhai 1.59-1
- fix crash with per-user stashes and return values
Tue Jan 28 23:00:00 2003 Nalin Dahyabhai 1.58-1
- fix configure to not link with both libk5crypto and libcrypto
Mon Jan 27 23:00:00 2003 Nalin Dahyabhai 1.57-1
- force -fPIC
- add --with-moduledir, --with-krb5-libs, --with-krbafs-libs to configure
- add per-user stashes and return values
Wed May 29 00:00:00 2002 Nalin Dahyabhai 1.56-1
- guess a default cell name
- fix what\'s hopefully the last parser bug
Fri May 17 00:00:00 2002 Nalin Dahyabhai 1.55-2
- rebuild in new environment
Mon Mar 25 23:00:00 2002 Nalin Dahyabhai 1.55-1
- handle account management for expired accounts correctly
Wed Mar 20 23:00:00 2002 Nalin Dahyabhai 1.54-1
- reorder configuration checks so that setting afs_cells will properly
force krb4_convert on
Wed Mar 20 23:00:00 2002 Nalin Dahyabhai 1.53-1
- fix what\'s hopefully the last parser bug
Mon Mar 18 23:00:00 2002 Nalin Dahyabhai 1.52-1
- apply patch from David Howells to add retain_tokens option
Thu Mar 7 23:00:00 2002 Nalin Dahyabhai 1.51-1
- fix what\'s hopefully the last parser bug
Sat Feb 23 23:00:00 2002 Nalin Dahyabhai 1.50-3
- rebuild
Wed Feb 20 23:00:00 2002 Nalin Dahyabhai 1.50-2
- rebuild in new environment
Fri Feb 15 23:00:00 2002 Nalin Dahyabhai 1.50-1
- documentation updates (no code changes)
Tue Feb 12 23:00:00 2002 Nalin Dahyabhai 1.49-1
- set PAM_USER using the user\'s parsed name, converted back to a local name
- add account management service (checks for key expiration and krb5_kuserok())
- handle account expiration errors
Fri Jan 25 23:00:00 2002 Nalin Dahyabhai 1.48-1
- autoconf fixes
Sat Oct 27 00:00:00 2001 Nalin Dahyabhai 1.47-2
- bump release number and rebuild to link with new version of krbafs
Wed Sep 26 00:00:00 2001 Nalin Dahyabhai 1.47-1
- fix parsing of options which have multiple whitespace-separated values,
like afs_cells
Thu Sep 6 00:00:00 2001 Nalin Dahyabhai 1.46-1
- link with libresolv to get res_search, tip from Justin McNutt, who
built it statically
- explicitly link with libdes425
- handle cases where getpwnam_r fails but still sets the result pointer
- if use_authtok is given and there is no authtok, error out
Tue Aug 28 00:00:00 2001 Nalin Dahyabhai 1.45-1
- set the default realm when a default realm is specified
Fri Aug 24 00:00:00 2001 Nalin Dahyabhai 1.44-1
- only use Kerberos error codes when there is no PAM error yet
Thu Aug 23 00:00:00 2001 Nalin Dahyabhai 1.43-1
- add minimum UID support (#52358)
- don\'t link pam_krb5 with libkrbafs
- make all options in krb5.conf available as PAM config arguments
Wed Aug 1 00:00:00 2001 Nalin Dahyabhai
- merge patch from Chris Chiappa for building with Heimdal
Wed Jul 25 00:00:00 2001 Nalin Dahyabhai
- note that we had to prepend the current directory to a given path in
dlopen.c when we had to (noted by Onime Clement)
Wed Jul 18 00:00:00 2001 Nalin Dahyabhai 1.42-1
- return PAM_NEW_AUTHTOK_REQD when attempts to get initial credentials
fail with KRB5KDC_ERR_KEY_EXP (noted by Onime Clement)
Fri Jul 13 00:00:00 2001 Nalin Dahyabhai
- add info about accessing the CVS repository to the README
- parser cleanups (thanks to Dane Skow for a more complicated sample)
Thu Jul 12 00:00:00 2001 Nalin Dahyabhai
- buildprereq the krbafs-devel package
Sat Jul 7 00:00:00 2001 Nalin Dahyabhai
- don\'t set forwardable and assorted other flags when getting password-
changing service ticket (noted, and fix supplied, by Onime Clement)
- try __posix_getpwnam_r on Solaris before we try getpwnam_r, which may
or may not be expecting the same number/type of arguments (noted by
Onime Clement)
- use krb5_aname_to_localname to convert the principal to a login name
and set PAM_USER to the result when authenticating
- some autoconf fixes for failure cases
Wed Jun 27 00:00:00 2001 Nalin Dahyabhai
- use krb5_change_password() to change passwords
Wed Jun 13 00:00:00 2001 Nalin Dahyabhai
- use getpwnam_r instead of getpwnam when available
Sat Jun 9 00:00:00 2001 Nalin Dahyabhai
- cleanup some autoconf checks
Fri Jun 8 00:00:00 2001 Nalin Dahyabhai
- don\'t call initialize_krb5_error_table() or initialize_ovk_error_table()
if they\'re not found at compile-time (reported for RHL 6.x by Chris Riley)
Fri Jun 1 00:00:00 2001 Nalin Dahyabhai
- note that [pam] is still checked in addition to [appdefaults]
- note that AFS and Kerberos IV support requires working Kerberos IV
configuration files (i.e., kinit -4 needs to work) (doc changes
suggested by Martin Schulz)
Wed May 30 00:00:00 2001 Nalin Dahyabhai
- add max_timeout, timeout_shift, initial_timeout, and addressless options
(patches from Simon Wilkinson)
- fix the README to document the [appdefaults] section instead of [pam]
- change example host and cell names in the README to use example domains
Thu May 3 00:00:00 2001 Nalin Dahyabhai
- don\'t delete tokens unless we\'re also removing ticket files (report and
patch from Sean Dilda)
- report initialization errors better
Fri Apr 27 00:00:00 2001 Nalin Dahyabhai
- treat semicolons as a comment character, like hash marks (bug reported by
Greg Francis at Gonzaga University)
- use the [:blank:] equivalence class to simplify the configuration file parser
- don\'t mess with the real environment
- implement mostly-complete aging support
Sun Apr 8 00:00:00 2001 Nalin Dahyabhai
- tweak the man page (can\'t use italics and bold simultaneously)
Sat Apr 7 00:00:00 2001 Nalin Dahyabhai
- restore the default TGS value (#35015)
Thu Mar 29 00:00:00 2001 Nalin Dahyabhai
- fix a debug message
- fix uninitialized pointer error
Tue Mar 27 00:00:00 2001 Nalin Dahyabhai
- don\'t fail to fixup the krb5 ccache if something goes wrong obtaining
v4 credentials or creating a krb4 ticket file (#33262)
Thu Mar 22 23:00:00 2001 Nalin Dahyabhai
- fixup the man page
- log return code from k_setpag() when debugging
- create credentials and get tokens when setcred is called for REINITIALIZE
Wed Mar 21 23:00:00 2001 Nalin Dahyabhai
- don\'t twiddle ownerships until after we get AFS tokens
- use the current time instead of the issue time when storing v4 creds, since
we don\'t know the issuing host\'s byte order
- depend on a PAM development header again instead of pam-devel
Tue Mar 20 23:00:00 2001 Nalin Dahyabhai
- add a separate config file parser for compatibility with settings that
predate the appdefault API
- use a version script under Linux to avoid polluting the global namespace
- don\'t have a default for afs_cells
- need to close the file when we succeed in fixing permissions (noted by
jlkatzAATTeos.ncsu.edu)
Mon Mar 19 23:00:00 2001 Nalin Dahyabhai
- use the appdefault API to read krb5.conf if available
- create v4 tickets in such a way as to allow 1.2.2 to not think there\'s
something fishy going on
Tue Feb 13 23:00:00 2001 Nalin Dahyabhai
- don\'t log unknown user names to syslog -- they might be sensitive information
Fri Feb 9 23:00:00 2001 Nalin Dahyabhai
- handle cases where krb5_init_context() fails
Wed Jan 17 23:00:00 2001 Nalin Dahyabhai
- be more careful around memory allocation (fixes from David J. MacKenzie)
Mon Jan 15 23:00:00 2001 Nalin Dahyabhai
- no fair trying to make me authenticate \'(null)\'
Tue Dec 5 23:00:00 2000 Nalin Dahyabhai
- rebuild in new environment
Fri Dec 1 23:00:00 2000 Nalin Dahyabhai
- rebuild in new environment
Wed Nov 8 23:00:00 2000 Nalin Dahyabhai
- only try to delete ccache files once
- ignore extra data in v4 TGTs, but log that we got some
- require \"validate\" to be true to try validating, and fail if validation fails
Fri Oct 20 00:00:00 2000 Nalin Dahyabhai
- catch and ignore errors reading keys from the keytab (for xscreensaver, vlock)
Thu Oct 19 00:00:00 2000 Nalin Dahyabhai
- fix prompting when the module\'s first in the stack and the user does not have
a corresponding principal in the local realm
- properly implement TGT validation
- change a few non-error status messages into debugging messages
- sync the README and the various man pages up
Tue Oct 3 00:00:00 2000 Nalin Dahyabhai
- fix \"use_authtok\" logic when password was not set by previous module
- require pam-devel to build
Mon Aug 28 00:00:00 2000 Nalin Dahyabhai
- fix errors with multiple addresses (#16847)
Thu Aug 17 00:00:00 2000 Nalin Dahyabhai
- change summary
Fri Aug 11 00:00:00 2000 Nalin Dahyabhai
- fix handling of null passwords
Thu Jul 6 00:00:00 2000 Nalin Dahyabhai
- fixes for Solaris 7 from Trevor Schroeder
Wed Jun 28 00:00:00 2000 Nalin Dahyabhai
- add Seth Vidal\'s no_user_check flag
- document no_user_check and skip_first_pass options in the man pages
- rebuild against Kerberos 5 1.2 (release 15)
Tue Jun 6 00:00:00 2000 Nalin Dahyabhai
- move man pages to /usr/share/man
Thu May 18 00:00:00 2000 Nalin Dahyabhai
- Make errors chown()ing ccache files non-fatal if (getuid() != 0), suggested
by Steve Langasek.
Tue May 16 00:00:00 2000 Nalin Dahyabhai
- Attempt to get initial Kerberos IV credentials when we get Kerberos 5 creds
Fri Apr 21 00:00:00 2000 Nalin Dahyabhai
- Chris Chiappa\'s modifications for customizing the ccache directory
Thu Apr 20 00:00:00 2000 Nalin Dahyabhai
- Mark Dawson\'s fix for krb4_convert not being forced on when afs_cells defined
Thu Mar 23 23:00:00 2000 Nalin Dahyabhai
- fix problem with leftover ticket files after multiple setcred() calls
Mon Mar 20 23:00:00 2000 Nalin Dahyabhai
- add proper copyright statements
- save password for modules later in the stack
Fri Mar 3 23:00:00 2000 Nalin Dahyabhai
- clean up prompter
Thu Mar 2 23:00:00 2000 Nalin Dahyabhai
- add krbafs as a requirement
Fri Feb 4 23:00:00 2000 Nalin Dahyabhai
- pick up non-afs PAM config files again
Wed Feb 2 23:00:00 2000 Nalin Dahyabhai
- autoconf and putenv() fixes for broken apps
- fix for compressed man pages
Fri Jan 14 23:00:00 2000 Nalin Dahyabhai
- tweak passwd, su, and vlock configuration files
Fri Jan 7 23:00:00 2000 Nalin Dahyabhai
- added both modules to spec file
Wed Dec 22 23:00:00 1999 Nalin Dahyabhai
- adapted the original spec file from pam_ldap
|
|
|
