poppassd (1.8.5-6) unstable; urgency=medium

  * QA upload.
  * debian/rules: Add build-{arch,indep}. (Closes: #999255)

[dgit import package poppassd 1.8.5-6]

13 files changed, 427 insertions, 3 deletions

diff --git a/Makefile b/Makefile
index 12040f4..167916b 100644
--- a/Makefile
+++ b/Makefile
@@ -1,4 +1,7 @@
-BINDIR = /usr/sbin
+# Added for Debian GNU/Linux
+DESTDIR =
+
+BINDIR = $(DESTDIR)/usr/sbin
 CFLAGS = -O2
 CC=gcc
 
@@ -6,7 +9,8 @@ poppassd: poppassd.c Makefile
 	$(CC) $(CFLAGS) poppassd.c -o poppassd -lpam -ldl
 
 install: poppassd
-	install -g bin -o root -m 500 poppassd $(BINDIR)
+	install -d $(BINDIR)
+	install -m755 poppassd $(BINDIR)
 
 clean:
 	rm -f *.o *~* core Makefile.new Makefile.bak poppassd
diff --git a/debian/changelog b/debian/changelog
new file mode 100644
index 0000000..493e485
--- /dev/null
+++ b/debian/changelog
@@ -0,0 +1,234 @@
+poppassd (1.8.5-6) unstable; urgency=medium
+
+  * QA upload.
+  * debian/rules: Add build-{arch,indep}. (Closes: #999255)
+
+ -- Adrian Bunk <bunk@debian.org>  Tue, 28 Dec 2021 01:09:09 +0200
+
+poppassd (1.8.5-5) unstable; urgency=medium
+
+  * QA upload.
+  * Orphan package.
+
+ -- Chris Hofstaedtler <zeha@debian.org>  Sun, 21 Feb 2021 15:42:07 +0000
+
+poppassd (1.8.5-4.1) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Bump debhelper compat level to 9 (Closes: #817626)
+
+ -- Peter Colberg <peter@colberg.org>  Wed, 05 Oct 2016 07:55:06 -0400
+
+poppassd (1.8.5-4) unstable; urgency=low
+
+  * Merge change from Ubuntu to depend on an inetd (closes: #520243)
+
+ -- Adam Conrad <adconrad@0c3.net>  Mon, 25 Jan 2010 12:56:21 -0700
+
+poppassd (1.8.5-3.2) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Add missing Depends on 'update-inetd' to ensure the presence of
+    /usr/sbin/update-inetd in postinst script. (Closes: #502830)
+
+ -- Chris Lamb <lamby@debian.org>  Mon, 20 Oct 2008 23:12:35 +0100
+
+poppassd (1.8.5-3.1) unstable; urgency=high
+
+  * Non-maintainer upload.
+  * Don't try to use update-inetd at purge time unless it is actually
+    available; fixes purge in some cases, patch from Andreas Henriksson.
+    (Closes: #398563)
+
+ -- Steinar H. Gunderson <sesse@debian.org>  Tue, 21 Nov 2006 19:54:57 +0100
+
+poppassd (1.8.5-3) unstable; urgency=low
+
+  * Move debian/copyright and debian/watch back to the old location.  With
+    any luck, it'll stop moving around, so I can stop uploading for this.
+  * Update to debhelper 4.0.0, with a debian/compat file and a build-dep.
+  * Properly support the not-so-new nostrip and noopt options during build.
+
+ -- Adam Conrad <adconrad@0c3.net>  Thu, 19 Jan 2006 20:38:44 +1100
+
+poppassd (1.8.5-2) unstable; urgency=low
+
+  * Updated debian/copyright and debian/watch to point at new location.
+  * Update to Standards-Version 3.6.2; no packaging changes required.
+
+ -- Adam Conrad <adconrad@0c3.net>  Sat,  8 Oct 2005 20:50:07 +1000
+
+poppassd (1.8.5-1) unstable; urgency=low
+
+  * New upstream release, incorporating Debian's gcc-3.3 patch.
+  * Add patch from Enrique Zanardi <ezanard@debian.org> to avoid segfault
+    when failing to retrieve the user's passwd struct (closes: #287820)
+  * Fix up short description to make lintian (and me) happy.
+
+ -- Adam Conrad <adconrad@0c3.net>  Fri, 21 Jan 2005 02:35:21 -0700
+
+poppassd (1.8.4-3) unstable; urgency=low
+
+  * Added a debian/watch file for the benefit of people who like to
+    run uscan across the entire Debian archive.
+
+ -- Adam Conrad <adconrad@0c3.net>  Wed, 28 Jul 2004 17:55:14 -0600
+
+poppassd (1.8.4-2) unstable; urgency=low
+
+  * Updated standards version to 3.6.1 (no changes)
+  * Added pointer to /usr/share/common-licenses/GPL in copyright
+  * Changed package priority to `optional' to match override
+  * Added a versioned dependency on libpam-runtime to guarantee
+    the availability of the /etc/pam.d/common-* files
+  * Wrote and included a manpage for poppassd(8), making this
+    package finally {lintian,linda}-clean (closes: #149153)
+
+ -- Adam Conrad <adconrad@0c3.net>  Fri, 19 Mar 2004 01:16:42 -0700
+
+poppassd (1.8.4-1) unstable; urgency=low
+
+  * New upstream release
+    - Uses correct PAM control file (closes: #156971)
+    - Should now deal properly with cracklib (closes: #228358)
+    - Bumps up MAX_LEN_USERNAME to 64 (closes: #220328)
+  * gcc-3.3 patches forward-ported to new upstream version
+    (closes: #195546)
+  * removed obsolete call to dh_undocumented in debian/rules
+  * updated PAM control file to include common-{auth,passwd}
+
+ -- Adam Conrad <adconrad@0c3.net>  Thu, 22 Jan 2004 11:28:30 -0700
+
+poppassd (1.8.1-1.1) unstable; urgency=low
+
+  * NMU.
+  * switched from varargs.h to stdarg.h (thanks to patch from
+    Matt Kraai), should build with gcc 3.3.  (Fixes: Bug#195546)
+
+ -- Thomas Smith <tgs@debian.org>  Wed, 20 Aug 2003 20:04:28 -0500
+
+poppassd (1.8.1-1) unstable; urgency=low
+
+  * New upstream version (and author)
+  * New maintainer
+    - Packaging completely from scratch, for the sake of practice
+    - Preserving changelog as a nod to those who have "gone before" :)
+  * Now handles password changes via PAM (closes: #129745)
+  * Patched (and forwarded upstream) to handle passwords with spaces
+    in them (closes: #95947)
+
+ -- Adam Conrad <adconrad@0c3.net>  Mon,  8 Apr 2002 19:51:36 -0600
+
+poppassd (1.2-14) unstable; urgency=low
+
+  * Removed extraneous call to dh_suidregister (Closes: #84551)
+
+ -- William Ono <wmono@debian.org>  Fri, 23 Feb 2001 15:00:22 -0800
+
+poppassd (1.2-13) unstable; urgency=low
+
+  * Incorporated suggestion from Duncan Sargeant
+      <dunc-mail-13130EA@typhaon.ucs.uwa.edu.au> to check if the entered
+      password is longer than a minimum value
+  * Fixed trivial compiler errors, thanks also to Duncan
+  * (Closes: #72958)
+
+ -- William Ono <wmono@debian.org>  Thu, 12 Oct 2000 11:36:08 -0700
+
+poppassd (1.2-12) unstable; urgency=low
+
+  * Set Build-Depends in debian/control
+
+ -- William Ono <wmono@debian.org>  Sun, 19 Mar 2000 20:13:30 -0800
+
+poppassd (1.2-11) unstable; urgency=low
+
+  * Policy: 3.0.1
+
+ -- William Ono <wmono@debian.org>  Thu, 21 Oct 1999 01:16:11 -0700
+
+poppassd (1.2-10) unstable; urgency=low
+
+  * New maintainer.
+  * Converted debian/rules to debhelper from debmake.
+  * Now uses suidregister (dh_suidregister).
+  * Now using more pristine upstream source -- this one is really
+      pristine, except the directory is renamed from poppassd-src/.
+  * And did general scrubbing and cleaning in the debian/ directory.
+
+ -- William Ono <wmono@debian.org>  Fri,  2 Jul 1999 20:47:23 -0700
+
+poppassd (1.2-9) unstable; urgency=low
+
+  * Fix mispelling "thank-you" to "thank you" (Closes:#34584)
+
+ -- Christoph Lameter <clameter@debian.org>  Thu,  1 Apr 1999 20:47:34 -0800
+
+poppassd (1.2-8) unstable; urgency=low
+
+  * #5722 no longer put entry in /etc/services since netbase has now an /etc/services
+    entry. Found exposed a bug in inetd. poppassd     will not work with the broken]
+    inetd in netbase 3.00-1 unless you edit /etc/services and make poppassd a real
+    protocol. Aliased protocols as mentioned in /etc/services do not yet work.
+    Filed a bug against netbase.
+  * Update copyright + manpage re changes I have made
+  * Remove README.debian since information is no longer applicable
+  * Fix #13931 (Simple Password causes poppassd to hang) by calling /usr/sbin/newusers
+    from poppassd instead of /usr/bin/passwd. This is a major change which will hopefully
+    get rid of all the pattern matching games of the past!
+  * #7614 #11961 #13523 old bugs
+
+ -- Christoph Lameter <clameter@debian.org>  Thu, 13 Nov 1997 16:14:24 +0000
+
+poppassd (1.2-7) unstable; urgency=low
+
+  * Build under hamm
+
+ -- Christoph Lameter <clameter@debian.org>  Fri, 31 Oct 1997 21:08:05 -0800
+
+poppassd (1.2-6) unstable stable; urgency=low
+
+  * Removed -o option when invoking passwd. Bug #11219
+    The new passwd suite does not support the -o option.
+
+ -- Christoph Lameter <clameter@debian.org>  Sat, 12 Jul 1997 21:46:11 -0700
+
+poppassd (1.2-5) unstable; urgency=low
+
+  * README.debian added with some notes regarding interaction with passwd
+    program.
+  * change inetd invocation to use /usr/sbin/tcpd #7473
+  * manpage for poppassd supplied #7474
+  * passwd chat scripts changed (Thanks to Eloy A. Paris). passwd always
+    invoked with -o option (not an optimal solution but it works at least).
+
+ -- Christoph Lameter <clameter@debian.org>  Mon, 24 Feb 1997 13:18:55 -0800
+
+poppassd (1.2-4) frozen unstable; urgency=low
+
+  * Release for frozen.
+
+ -- Christoph Lameter <clameter@debian.org>  Thu, 28 Nov 1996 10:11:54 -0800
+
+poppassd (1.2-3) unstable; urgency=low
+
+  * rebuild with newest debmake to fix a bug
+
+ -- Christoph Lameter <clameter@debian.org>  Wed, 27 Nov 1996 09:05:11 -0800
+
+poppassd (1.2-2) unstable; urgency=low
+
+  * debmake
+  * Shadow patch
+
+ -- Christoph Lameter <clameter@debian.org>  Tue, 22 Oct 1996 18:47:22 -0700
+
+poppassd (1.2-1) unstable; urgency=low
+
+  * Initial Release
+
+ -- Christoph Lameter <clameter@debian.org>  Sun, 15 Sep 1996 15:37:25 +0100
+
+Local variables:
+mode: debian-changelog
+End:
diff --git a/debian/compat b/debian/compat
new file mode 100644
index 0000000..ec63514
--- /dev/null
+++ b/debian/compat
@@ -0,0 +1 @@
+9
diff --git a/debian/control b/debian/control
new file mode 100644
index 0000000..3b8302a
--- /dev/null
+++ b/debian/control
@@ -0,0 +1,21 @@
+Source: poppassd
+Section: mail
+Priority: optional
+Maintainer: Debian QA Group <packages@qa.debian.org>
+Build-Depends: debhelper (>= 9), libpam-dev
+Standards-Version: 3.6.2
+
+Package: poppassd
+Architecture: any
+Depends: netbase, libpam-runtime (>= 0.76-14), update-inetd, openbsd-inetd | inet-superserver, ${shlibs:Depends}
+Description: password change server for Eudora and NUPOP
+ This package provides a daemon for changing passwords on POP mail accounts,
+ a feature common to Eudora and other MacOS/Win32 mail user agents.  This
+ feature is also commonly used for TCP loopback password changing from web
+ scripting languages like PHP or Perl, so that the webserver process doesn't
+ need to be run as root (on in the shadow group).
+ .
+ This version of poppassd changes passwords via PAM (as opposed to other
+ versions of the same daemon that used the newusers(8) application to change
+ passwords), allowing for great flexibility.
+
diff --git a/debian/copyright.header b/debian/copyright.header
new file mode 100644
index 0000000..fdbf013
--- /dev/null
+++ b/debian/copyright.header
@@ -0,0 +1,10 @@
+This package was downloaded from http://echelon.pl/pubs/poppassd.html and
+debianized by Adam Conrad <adconrad@0c3.net> on Mon, 8 Apr 2002 18:17:05.
+
+Upstream Author: Pawel Krawczyk <kravietz at echelon dot pl>
+
+Should you choose to redistribute this package or source under the terms
+of the GNU GPL (as is permitted by the license), the full text of the GPL
+can be found at /usr/share/common-licenses/GPL on any Debian system.  The
+complete license text for poppassd follows:
+
diff --git a/debian/docs b/debian/docs
new file mode 100644
index 0000000..e845566
--- /dev/null
+++ b/debian/docs
@@ -0,0 +1 @@
+README
diff --git a/debian/poppassd.8 b/debian/poppassd.8
new file mode 100644
index 0000000..7613106
--- /dev/null
+++ b/debian/poppassd.8
@@ -0,0 +1,51 @@
+.TH "POPPASSD" 8 "19 March 2004" "Debian" ""
+.SH "NAME"
+poppassd \- Password change server for Eudora and NUPOP mail clients
+.SH "DESCRIPTION"
+.B poppassd
+runs from inetd and listens on TCP port 106 by default.  Its sole purpose
+in life is to engage in short FTP-like conversations from client applications
+and execute (or deny) remote password changes via the PAM facilities
+configured in \fI/etc/pam.d/poppassd\fR.  The conversation looks something like this:
+.IP
+200 poppassd v1.8.4 hello, who are you?
+.br
+user adconrad
+.br
+200 Your password please.
+.br
+pass foo
+.br
+200 Your new password please.
+.br
+newpass bar
+.br
+200 Password changed, thank-you.
+.br
+quit
+.br
+200 Bye.
+.PP
+As can be seen from the example above, unencrypted passwords are transmitted
+over the network.  Because of this, it is recommended that you use this
+daemon only for local loopback password changing (for instance, from Perl,
+Python, or PHP web applications on the same server) and block all non-local
+access to port 106, either via tcpwrappers (\fI/etc/hosts.deny\fR) or with appropriate
+firewall rules.
+.PP
+If sending unencrypted passwords over the wire doesn't bug you terribly much
+(as in the case of an ISP with hundreds of POP3 mail accounts), this daemon
+can provide a simple way for some of your clients (those running mail clients
+that actually support this protocol) to easily change their passwords.
+.SH "FILES"
+.TP
+\fI/etc/pam.d/poppassd\fR
+Contains the PAM configuration for poppassd.  By default on Debian, it
+merely includes the common-auth and common-password files, which should
+work in most cases.  If this doesn't cut it for your site, tailor to
+suit.
+.SH "SEE ALSO"
+pam(7), \fB\fBinetd\fR\fR(8), \fB\fIhosts.deny\fR\fR(5)
+.SH "AUTHOR"
+This manual page was written by Adam Conrad <adconrad@0c3.net>
+for the Debian operating system.
diff --git a/debian/poppassd.pam b/debian/poppassd.pam
new file mode 100644
index 0000000..464aa14
--- /dev/null
+++ b/debian/poppassd.pam
@@ -0,0 +1,6 @@
+#
+# The PAM configuration file for the `poppassd' daemon
+#
+
+@include common-auth
+@include common-password
diff --git a/debian/postinst b/debian/postinst
new file mode 100644
index 0000000..9950f7f
--- /dev/null
+++ b/debian/postinst
@@ -0,0 +1,7 @@
+#!/bin/sh
+set -e
+update-inetd --comment-chars "#disabled#" --disable poppassd
+update-inetd --group MAIL --add 'poppassd\tstream\ttcp\tnowait\troot\t/usr/sbin/tcpd\t/usr/sbin/poppassd'
+
+#DEBHELPER#
+
diff --git a/debian/postrm b/debian/postrm
new file mode 100644
index 0000000..8b27796
--- /dev/null
+++ b/debian/postrm
@@ -0,0 +1,10 @@
+#!/bin/sh
+set -e
+
+if which update-inetd >/dev/null 2>&1 ; then
+	update-inetd --remove '^poppassd'
+	update-inetd --comment-chars "#disabled#" --enable poppassd
+fi
+
+#DEBHELPER#
+
diff --git a/debian/rules b/debian/rules
new file mode 100755
index 0000000..215054c
--- /dev/null
+++ b/debian/rules
@@ -0,0 +1,77 @@
+#!/usr/bin/make -f
+# Sample debian/rules that uses debhelper.
+# GNU copyright 1997 to 1999 by Joey Hess.
+
+# Uncomment this to turn on verbose mode.
+#export DH_VERBOSE=1
+
+ifeq (,$(findstring noopt,$(DEB_BUILD_OPTIONS)))
+	CFLAGS += -O2 -g -Wall
+else
+	CFLAGS += -O0 -g -Wall
+endif
+ifeq (,$(findstring nostrip,$(DEB_BUILD_OPTIONS)))
+	INSTALL_PROGRAM += -s
+endif
+
+build: build-stamp
+build-stamp:
+	dh_testdir
+
+	# Add here commands to compile the package.
+	$(MAKE) CFLAGS="$(CFLAGS)"
+
+	# Keeping this here as a reminder to rewrite my manpage in docbook,
+	# 'cause I royally suck at writing them by hand.
+	#/usr/bin/docbook-to-man debian/poppassd.sgml > poppassd.1
+
+	touch build-stamp
+
+clean:
+	dh_testdir
+	dh_testroot
+	rm -f build-stamp configure-stamp
+	rm -f debian/copyright
+
+	# Add here commands to clean up after the build process.
+	-$(MAKE) clean
+
+	dh_clean
+
+install: build
+	dh_testdir
+	dh_testroot
+	dh_clean -k
+	dh_installdirs
+
+	# Add here commands to install the package into debian/poppassd.
+	$(MAKE) install DESTDIR=$(CURDIR)/debian/poppassd
+
+
+# Build architecture-independent files here.
+binary-indep: build install
+# We have nothing to do by default.
+
+# Build architecture-dependent files here.
+binary-arch: build install
+	dh_testdir
+	dh_testroot
+	cat debian/copyright.header COPYING > debian/copyright
+	dh_installdocs
+	dh_installpam
+	dh_installman debian/poppassd.8
+#	dh_installinfo
+	dh_installchangelogs 
+	dh_strip
+	dh_compress
+	dh_fixperms
+	dh_installdeb
+	dh_shlibdeps
+	dh_gencontrol
+	dh_md5sums
+	dh_builddeb
+
+build-arch: build
+build-indep: build
+binary: binary-indep binary-arch
+.PHONY: build build-arch build-indep clean binary-indep binary-arch binary install
diff --git a/debian/watch b/debian/watch
new file mode 100644
index 0000000..c0595ba
--- /dev/null
+++ b/debian/watch
@@ -0,0 +1,2 @@
+version=2
+http://echelon.pl/pubs/poppassd.html .*poppassd-(.*)\.tar\.gz
diff --git a/poppassd.c b/poppassd.c
index b9113de..eb40d80 100644
--- a/poppassd.c
+++ b/poppassd.c
@@ -233,7 +233,7 @@ int main (int argc, char *argv[])
 
      pw=getpwnam(user);
 
-     if(pw->pw_uid<POP_MIN_UID || pw == NULL) {
+     if(pw == NULL || pw->pw_uid<POP_MIN_UID) {
          WriteToClient("500 Old password is incorrect.");
          syslog(LOG_ERR, "failed attempt to change password for %s", user);
          exit(1);