[pam_krb5] - update to 2.3.13

Nalin Dahyabhai nalin at fedoraproject.org
Tue Sep 6 15:54:10 UTC 2011


commit b44571be4edd152b9581c7741f3bba66f281c7e2
Author: Nalin Dahyabhai <nalin at redhat.com>
Date:   Tue Sep 6 11:53:40 2011 -0400

    - update to 2.3.13

 .gitignore    |    1 +
 pam_krb5.spec |   20 +++++++++++++++++---
 sources       |    2 +-
 3 files changed, 19 insertions(+), 4 deletions(-)
---
diff --git a/.gitignore b/.gitignore
index 1eb5d9d..2da8fe8 100644
--- a/.gitignore
+++ b/.gitignore
@@ -9,3 +9,4 @@ pam_krb5-2.3.7-1.tar.gz
 pam_krb5-2.3.10-1.tar.gz
 pam_krb5-2.3.11-1.tar.gz
 /pam_krb5-2.3.12-1.tar.gz
+/pam_krb5-2.3.13-1.tar.gz
diff --git a/pam_krb5.spec b/pam_krb5.spec
index 0a32a43..4d460b9 100644
--- a/pam_krb5.spec
+++ b/pam_krb5.spec
@@ -1,6 +1,6 @@
 Summary: A Pluggable Authentication Module for Kerberos 5
 Name: pam_krb5
-Version: 2.3.12
+Version: 2.3.13
 Release: 1%{?dist}
 Source0: https://fedorahosted.org/released/pam_krb5/pam_krb5-%{version}-1.tar.gz
 License: BSD or LGPLv2+
@@ -21,8 +21,10 @@ The included pam_krb5afs module also gets AFS tokens if so configured.
 
 %build
 %configure --libdir=/%{_lib} \
-	--with-default-use-shmem=sshd --with-default-external=sshd \
-	--with-default-multiple-ccaches="su su-l"
+	--with-default-use-shmem="sshd" \
+	--with-default-external="sshd sshd-rekey gssftp" \
+	--with-default-multiple-ccaches="su su-l" \
+	--with-default-no-cred-session="sshd"
 make %{?_smp_mflags}
 
 %install
@@ -52,6 +54,18 @@ sed -ri -e 's|/lib(64)?/|/\$LIB/|g' $RPM_BUILD_ROOT/%{_mandir}/man*/pam_krb5*.8*
 %{_mandir}/man8/*
 
 %changelog
+* Thu Jul 28 2011 Nalin Dahyabhai <nalin at redhat.com> - 2.3.13-1
+- update to 2.3.13
+  - don't treat setcred() as session open/close in sshd (#720609, #725797)
+  - don't create a new ccache when "external" is enabled, as the calling
+    application's already managing one (#690832)
+  - always re-read "external" creds when possible, and use an in-memory
+    ccache when setting up tokens (more of #690832)
+  - apply when-to-prompt-for-what logic that we use in authentication to
+    the initial part of password-change (#700520)
+  - fix some bashisms and explicitly note errors when we run into them
+    (ticket #1, patch by Aleksander Adamowski)
+
 * Thu Mar 24 2011 Nalin Dahyabhai <nalin at redhat.com> - 2.3.12-1
 - update to 2.3.12
   - prefer to send change-password over set-password requests (#676526)
diff --git a/sources b/sources
index 9d62397..2bf5f7c 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-2cfbeaa4ea3b9562ef8a0645936027d7  pam_krb5-2.3.12-1.tar.gz
+408ea56c1b8082865805aa93ce6954eb  pam_krb5-2.3.13-1.tar.gz


More information about the scm-commits mailing list