kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
pkgsrc/security/PAM/patches/patch-ab

66 lines
2 KiB
Text
Raw Normal View History

Make this build with db4. This fixes the first problem in PR 36617.
2007-07-09 05:51:33 +02:00
$NetBSD: patch-ab,v 1.6 2007/07/09 03:51:33 minskim Exp $
Update security/PAM to 0.77. Changes from version 0.75 include: * Numerous bug fixes for most of the PAM modules, including several string length checks and fixes (update recommended!). * fix for legacy behavior of pam_setcred and pam_close_session in the case that pam_authenticate and pam_open_session hadn't been called * pam_unix: - don't zero out password strings during password changing function * pam_wheel: - feature: can use the module to provide wheel access to non-root accounts. * pam_limits: - added '%' domain for maxlogins limiting, now '*' and @group have the old meaning (every) and '%' the new one (all) - handle negative priority limits (which can apply to the superuser too). * pam_userdb: - require that all of typed password matches that in database * pam_access: - added the 'fieldsep=' argument, made a PAM_RHOST of "" equivalent to NULL Incidentally, cups-1.1.18 will once again do PAM authentication using pam_unix.so if built against PAM-0.77.
2002-12-23 22:23:56 +01:00
Make this build with db4. This fixes the first problem in PR 36617.
2007-07-09 05:51:33 +02:00
--- configure.in.orig 2002-07-08 23:17:13.000000000 -0700
Update security/PAM to 0.77. Changes from version 0.75 include: * Numerous bug fixes for most of the PAM modules, including several string length checks and fixes (update recommended!). * fix for legacy behavior of pam_setcred and pam_close_session in the case that pam_authenticate and pam_open_session hadn't been called * pam_unix: - don't zero out password strings during password changing function * pam_wheel: - feature: can use the module to provide wheel access to non-root accounts. * pam_limits: - added '%' domain for maxlogins limiting, now '*' and @group have the old meaning (every) and '%' the new one (all) - handle negative priority limits (which can apply to the superuser too). * pam_userdb: - require that all of typed password matches that in database * pam_access: - added the 'fieldsep=' argument, made a PAM_RHOST of "" equivalent to NULL Incidentally, cups-1.1.18 will once again do PAM authentication using pam_unix.so if built against PAM-0.77.
2002-12-23 22:23:56 +01:00
+++ configure.in
pkgsrc added --without-libcrack to CONFIGURE_ARGS if libcrack is missing from PKG_OPTIONS, and also comments out the libcrack module in the PLIST. However this means nothing to the PAM configure script, which will find a system libcrack and install the libcrack module. When the pkgsrc bulk build deinstalls PAM, it detects the leftover libcrack module and marks PAM and its dependents failed. Fix this by adding a --disable-crack option to the configure script.
2006-10-10 05:20:48 +02:00
@@ -157,6 +157,10 @@ AC_ARG_ENABLE(lckpwdf,
WITH_LCKPWDF=no, WITH_LCKPWDF=yes)
AC_SUBST(WITH_LCKPWDF)
+AC_ARG_ENABLE(crack,
+[ --disable-crack do not use crack],
+ WITH_CRACK=no, WITH_CRACK=yes)
+
AC_CHECK_HEADERS(paths.h)
AC_ARG_WITH(mailspool,
[ --with-mailspool path to mail spool directory
@@ -195,11 +199,15 @@ dnl
dnl At least on Solaris, the existing libcrack must be dynamic.
dnl Ought to introduce a check for this.
dnl
+if test "$WITH_CRACK" = "yes"; then
AC_CHECK_LIB(crack, FascistCheck, HAVE_LIBCRACK=yes ; AC_DEFINE(HAVE_LIBCRACK),
Update security/PAM to 0.77. Changes from version 0.75 include: * Numerous bug fixes for most of the PAM modules, including several string length checks and fixes (update recommended!). * fix for legacy behavior of pam_setcred and pam_close_session in the case that pam_authenticate and pam_open_session hadn't been called * pam_unix: - don't zero out password strings during password changing function * pam_wheel: - feature: can use the module to provide wheel access to non-root accounts. * pam_limits: - added '%' domain for maxlogins limiting, now '*' and @group have the old meaning (every) and '%' the new one (all) - handle negative priority limits (which can apply to the superuser too). * pam_userdb: - require that all of typed password matches that in database * pam_access: - added the 'fieldsep=' argument, made a PAM_RHOST of "" equivalent to NULL Incidentally, cups-1.1.18 will once again do PAM authentication using pam_unix.so if built against PAM-0.77.
2002-12-23 22:23:56 +01:00
HAVE_LIBCRACK=no)
pkgsrc added --without-libcrack to CONFIGURE_ARGS if libcrack is missing from PKG_OPTIONS, and also comments out the libcrack module in the PLIST. However this means nothing to the PAM configure script, which will find a system libcrack and install the libcrack module. When the pkgsrc bulk build deinstalls PAM, it detects the leftover libcrack module and marks PAM and its dependents failed. Fix this by adding a --disable-crack option to the configure script.
2006-10-10 05:20:48 +02:00
+else
+HAVE_LIBCRACK=no
+fi
Update security/PAM to 0.77. Changes from version 0.75 include: * Numerous bug fixes for most of the PAM modules, including several string length checks and fixes (update recommended!). * fix for legacy behavior of pam_setcred and pam_close_session in the case that pam_authenticate and pam_open_session hadn't been called * pam_unix: - don't zero out password strings during password changing function * pam_wheel: - feature: can use the module to provide wheel access to non-root accounts. * pam_limits: - added '%' domain for maxlogins limiting, now '*' and @group have the old meaning (every) and '%' the new one (all) - handle negative priority limits (which can apply to the superuser too). * pam_userdb: - require that all of typed password matches that in database * pam_access: - added the 'fieldsep=' argument, made a PAM_RHOST of "" equivalent to NULL Incidentally, cups-1.1.18 will once again do PAM authentication using pam_unix.so if built against PAM-0.77.
2002-12-23 22:23:56 +01:00
AC_SUBST(HAVE_LIBCRACK)
-AC_CHECK_LIB(crypt, fcrypt, HAVE_LIBCRYPT=yes ; AC_DEFINE(HAVE_LIBCRYPT),
+AC_CHECK_LIB(crypt, crypt, HAVE_LIBCRYPT=yes ; AC_DEFINE(HAVE_LIBCRYPT),
HAVE_LIBCRYPT=no)
AC_SUBST(HAVE_LIBCRYPT)
AC_CHECK_LIB(util, logwtmp, HAVE_LIBUTIL=yes ; AC_DEFINE(HAVE_LIBUTIL),
Make this build with db4. This fixes the first problem in PR 36617.
2007-07-09 05:51:33 +02:00
@@ -215,6 +223,9 @@ if test x$HAVE_LIBDB != xyes ; then
HAVE_LIBDB=no)
fi
AC_SUBST(HAVE_LIBDB)
+AC_CHECK_LIB(db4, db_create, HAVE_LIBDB4=yes ; AC_DEFINE(HAVE_LIBDB4),
+ HAVE_LIBDB4=no)
+AC_SUBST(HAVE_LIBDB4)
AC_CHECK_LIB(fl, yylex, yyterminate, HAVE_LIBFL=yes ; AC_DEFINE(HAVE_LIBFL),
HAVE_LIBFL=no)
AC_SUBST(HAVE_LIBFL)
@@ -240,6 +251,13 @@ AC_CHECK_HEADERS(fcntl.h limits.h malloc
Update security/PAM to 0.77. Changes from version 0.75 include: * Numerous bug fixes for most of the PAM modules, including several string length checks and fixes (update recommended!). * fix for legacy behavior of pam_setcred and pam_close_session in the case that pam_authenticate and pam_open_session hadn't been called * pam_unix: - don't zero out password strings during password changing function * pam_wheel: - feature: can use the module to provide wheel access to non-root accounts. * pam_limits: - added '%' domain for maxlogins limiting, now '*' and @group have the old meaning (every) and '%' the new one (all) - handle negative priority limits (which can apply to the superuser too). * pam_userdb: - require that all of typed password matches that in database * pam_access: - added the 'fieldsep=' argument, made a PAM_RHOST of "" equivalent to NULL Incidentally, cups-1.1.18 will once again do PAM authentication using pam_unix.so if built against PAM-0.77.
2002-12-23 22:23:56 +01:00
dnl Linux wants features.h in some of the source files.
AC_CHECK_HEADERS(features.h)
+dnl For module/pam_filter
+AC_CHECK_HEADERS(termios.h)
+
+dnl For module/pam_unix
+AC_CHECK_HEADERS(shadow.h)
+AC_CHECK_FUNCS(getspnam)
+
dnl For module/pam_cracklib
AC_CHECK_HEADERS(crypt.h)
Make this build with db4. This fixes the first problem in PR 36617.
2007-07-09 05:51:33 +02:00
@@ -257,7 +275,7 @@ dnl being found.
Update security/PAM to 0.77. Changes from version 0.75 include: * Numerous bug fixes for most of the PAM modules, including several string length checks and fixes (update recommended!). * fix for legacy behavior of pam_setcred and pam_close_session in the case that pam_authenticate and pam_open_session hadn't been called * pam_unix: - don't zero out password strings during password changing function * pam_wheel: - feature: can use the module to provide wheel access to non-root accounts. * pam_limits: - added '%' domain for maxlogins limiting, now '*' and @group have the old meaning (every) and '%' the new one (all) - handle negative priority limits (which can apply to the superuser too). * pam_userdb: - require that all of typed password matches that in database * pam_access: - added the 'fieldsep=' argument, made a PAM_RHOST of "" equivalent to NULL Incidentally, cups-1.1.18 will once again do PAM authentication using pam_unix.so if built against PAM-0.77.
2002-12-23 22:23:56 +01:00
dnl Look for cracklib dictionary
AC_MSG_CHECKING(path to cracklib dictionary)
-DICT_DIR_CANDIDATES="/usr/lib /usr/share/dict /usr/share/lib \
+DICT_DIR_CANDIDATES="${prefix}/libdata /usr/lib /usr/share/dict /usr/share/lib \
/usr/local/lib /usr/local/share/lib"
DICT_FILE_CANDIDATES="pw_dict cracklib_dict"
CRACKLIB_DICTPATH=""
Reference in a new issue Copy permalink