1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
|
libpam-afs-session (2.6-2) unstable; urgency=medium
* Orphan the package (see #907361).
* Move the packaging repository to Salsa from Alioth and update Vcs-*.
* Update to debhelper compatibility level V11.
- Remove --parallel flags, no longer needed.
- Remove dh-autoreconf dependency and sequence, no longer needed.
* Update standards version to 4.2.1.
- Enable verbose test output.
- Install the upstream release notes as NEWS.gz, not changelog.gz.
- Add Rules-Requires-Root: no.
- Use https for URLs in debian/control and debian/copyright.
* Bump watch file version to 4 and use https for URL.
* Remove version qualifications on libpam-runtime and libpam0g
dependencies, which were older than oldoldstable.
* Switch to the DEP-14 branch layout and update debian/gbp.conf
accordingly.
* Refresh upstream signing key.
* Run wrap-and-sort -ast.
-- Russ Allbery <rra@debian.org> Sun, 26 Aug 2018 16:08:34 -0700
libpam-afs-session (2.6-1) unstable; urgency=medium
* New upstream release.
- Fix PAM_REINITIALIZE_CRED and PAM_REFRESH_CRED handling in
combination with opening a new session. Fixes failure to isolate
tokens when used with sudo. (Closes: #782589)
* Remove erroneous branch information from Vcs-Git.
* Prefer *.tar.xz in debian/watch to match packaging.
* Add debian/gbp.conf reflecting the branch layout of the default
packaging repository.
* Refresh upstream signing key.
* Update standards version to 3.9.6 (no changes required).
-- Russ Allbery <rra@debian.org> Sat, 19 Sep 2015 11:45:52 -0700
libpam-afs-session (2.5-4) unstable; urgency=medium
* Remove now-unnecessary dh_builddeb override to force xz compression.
* Convert debian/copyright to copyright-format 1.0.
* Specify the Debian packaging branch in the Vcs-Git control field.
* Add the upstream release signing key and verify it in debian/watch.
* Update standards version to 3.9.5 (no changes required).
-- Russ Allbery <rra@debian.org> Sun, 13 Apr 2014 12:51:12 -0700
libpam-afs-session (2.5-3) unstable; urgency=low
* Apply upstream patch to add AM_PROG_AR to configure.ac, now apparently
required by Automake for the binutils in unstable. (Closes: #713292)
* Apply upstream patch to build with largefile support. This is
probably pointless for this module, but consistency is good.
* Switch to xz compression for the binary package and *.debian.tar file.
* Enable parallel builds.
* Canonicalize the Vcs-Git and Vcs-Browser URLs.
* Update standards version to 3.9.4 (no changes required).
-- Russ Allbery <rra@debian.org> Sun, 23 Jun 2013 12:52:19 -0700
libpam-afs-session (2.5-2) unstable; urgency=low
* Enable bindnow hardening flags.
* Change the architecture of the package to linux-any, since there is no
OpenAFS support for the FreeBSD kernel yet.
* Bump debhelper dependency to 9 now that compatibility mode V9 is no
longer experimental.
* Regenerate the Autotools build system with dh-autoreconf.
* Move single-debian-patch to local-options and patch-header to
local-patch-header so that they only apply to the packages I build and
NMUs get regular version-numbered patches.
-- Russ Allbery <rra@debian.org> Mon, 06 Feb 2012 18:23:17 -0800
libpam-afs-session (2.5-1) unstable; urgency=low
* New upstream release.
- Reset the SIGCHLD handler while spawning an external aklog program
so that the application SIGCHLD handler isn't invoked when aklog
exits. (Closes: #630609)
* Convert to multiarch. Depend on the multiarch version of
libpam0g, install the module into the multiarch version of
/lib/security, and declare the package Multi-Arch: same.
* Update to debhelper compatibility level V9 (experimental).
- Build-Depend on debhelper 8.1.3 or later.
- Add Pre-Depends: ${misc:Pre-Depends}.
- Add Lintian override for using an experimental debhelper level.
* Remove unnecessary debian/dirs file.
-- Russ Allbery <rra@debian.org> Mon, 25 Jul 2011 18:26:10 -0700
libpam-afs-session (2.4-1) unstable; urgency=low
* New upstream release.
- Fix memory allocation bug in the previous release.
-- Russ Allbery <rra@debian.org> Wed, 08 Jun 2011 20:01:40 -0700
libpam-afs-session (2.3-1) unstable; urgency=low
* New upstream release.
- Honor KRB5CCNAME from the general environment if it is set and that
variable is not set in the PAM environment, rather than declining to
run aklog. (Closes: #621496)
* Update standards version to 3.9.2 (no changes required).
-- Russ Allbery <rra@debian.org> Tue, 07 Jun 2011 14:17:00 -0700
libpam-afs-session (2.2-1) unstable; urgency=low
* New upstream release.
- Return PAM_SUCCESS instead of PAM_IGNORE from pam_setcred if AFS is
not available or if we're deleting credentials but the PAM module is
configured not to delete tokens. Returning PAM_IGNORE from
pam_setcred confuses the Linux PAM library.
- Fix error return statuses for pam_setcred.
-- Russ Allbery <rra@debian.org> Thu, 03 Mar 2011 14:25:51 -0800
libpam-afs-session (2.1-1) experimental; urgency=low
* New upstream release.
- The program option can now pass arguments to aklog by separating
them with spaces, tabs, or commas (commas are most useful in the PAM
configuration files).
- Paths to aklog containing spaces or commas are no longer supported.
-- Russ Allbery <rra@debian.org> Sun, 23 Jan 2011 15:37:59 -0800
libpam-afs-session (2.0-1) experimental; urgency=low
* New upstream release.
- If there is no PAG, create a new one and obtain tokens even if the
module has already run. Works around destruction of the PAG on
Linux by keyring initialization PAM modules.
- pam_close_session now removes module-specific data indicating that
the module has already run, for better behavior in the rare case of
opening multiple sessions using the same PAM handle.
- Log an ignore status properly when debugging is enabled.
* Add libtest-pod-perl to build dependencies for documentation tests.
* Document the Linux kernel requirement for keyring support to use AFS
PAGs properly in README.Debian. (Closes: #516864)
* Document the requirement for vserver guests to have access to the
/proc file used by the OpenAFS cache manager for AFS system calls in
README.Debian. (Closes: #485049)
* Update to debhelper compatibility level V8.
- Use debhelper rule minimization.
* Switch to 3.0 (quilt) source format. Force a single Debian patch and
include a custom patch header explaining that it is a rollup of any
fixes cherry-picked from upstream and breaking those patches out
separately would be work for no gain.
-- Russ Allbery <rra@debian.org> Wed, 29 Dec 2010 16:28:44 -0800
libpam-afs-session (1.7-2) unstable; urgency=low
* Apply upstream deltas:
- [3e57d766] Don't return an initialized value when notokens is set
* Install a pam-auth-update profile for pam_afs_session that runs it
from the additional section during both auth and session. Thanks,
Nate Coraor. (Closes: #523796)
* Remove libpam-openafs-session transitional package. This package was
needed for upgrades from etch to lenny.
* Add ${misc:Depends} to dependencies.
* Change section to admin to match override.
* Update standards version to 3.9.1 (no changes required).
* Explicitly declare source format 1.0 for right now.
-- Russ Allbery <rra@debian.org> Wed, 11 Aug 2010 17:45:40 -0700
libpam-afs-session (1.7-1) unstable; urgency=low
* New upstream release.
- Return PAM_IGNORE when AFS isn't available and when functions are
skipped due to the configuration.
- Set explicit hidden visibility for all local symbols and further
restrict the visible symbols with a version script, removing leaks
of symbols into the application namespace.
* Install NEWS as the upstream changelog. Upstream no longer includes a
detailed CHANGES file.
* Add a Homepage control field.
* Add Vcs-Git and Vcs-Browser control fields.
* Update standards version to 3.8.0 (no changes required).
-- Russ Allbery <rra@debian.org> Thu, 10 Jul 2008 22:56:13 -0700
libpam-afs-session (1.6-1) unstable; urgency=low
* New upstream release.
- Correctly check the exit status of aklog.
- Additional documentation and examples.
* Install the upstream CHANGES as changelog.gz and install NEWS
separately.
* Improve debian/copyright based on upstream's LICENSE file.
* Touch $@ instead of the named stamp files.
* Update standards version to 3.7.3 (no changes required).
-- Russ Allbery <rra@debian.org> Sat, 08 Mar 2008 20:34:00 -0800
libpam-afs-session (1.5-1) unstable; urgency=low
* New upstream release.
- Fixed several memory leaks.
- Don't dereference a NULL pointer on memory allocation failure.
* Copy the PAM module instead of using make install.
-- Russ Allbery <rra@debian.org> Sun, 30 Sep 2007 01:05:27 -0700
libpam-afs-session (1.4-2) unstable; urgency=low
* Recommend openafs-client rather than depend on it. All the module
truly requires is that the kernel module be loaded, which isn't what
openafs-client provides. Users may be using a separately built
OpenAFS package or Arla.
-- Russ Allbery <rra@debian.org> Wed, 06 Jun 2007 18:35:07 -0700
libpam-afs-session (1.4-1) unstable; urgency=low
* New upstream release.
- New afs_cells configuration option to get tokens in other cells.
* Use DESTDIR in debian/rules now that it's supported.
-- Russ Allbery <rra@debian.org> Thu, 10 May 2007 18:10:48 -0700
libpam-afs-session (1.3-1) unstable; urgency=low
* Initial release.
* Replace libpam-openafs-session with libpam-afs-session.
- Support refreshing tokens. (Closes: #318936)
- Support reading configuration options from krb5.conf.
- Support many additional options.
- Add a pam_afs_session man page documenting the available options.
* Provide a transitional package to ease upgrades.
-- Russ Allbery <rra@debian.org> Wed, 11 Apr 2007 13:46:18 -0700
|
