UVF: please sync from debian

install log:

ubu:pts/0 /tmp # dpkg -i /var/cache/pbuilder/result/libpam-krb5_2.3-1_i386.deb (Reading database ... 200266 files and directories currently installed.)
Preparing to replace libpam-krb5 1.2.0-3 (using .../libpam-krb5_2.3-1_i386.deb) ...
Unpacking replacement libpam-krb5 ...
Setting up libpam-krb5 (2.3-1) ...

and NEWS after 1.2.0 from <a href=http://www.eyrie.org/~eagle/software/pam-krb5/news.html>here</a>

damn, a _working_ link:

http://www.eyrie.org/~eagle/software/pam-krb5/news.html

While the NEWS file and ChangeLog look generally ok - I have no experience with this package at all and a bit anxious about changes in PAM -- would you subscribe to the pam-krb5 bugs and take a look at them for regressions?

I'm quite happy with these, though it has a number of changes. It has a few important fixes (eg for credentials caching) that I'd like to see in edgy. Please note that if this one goes through, we should also sync libpam-heimdal which is a separate source package using the same orig.tar.gz (built against heimdal libs)

Daniel: you mean that if this upload reveals regressions I'd look at them? Sure! I subscribed to libpam-krb5 bugmail.

BTW, this version has been in debian for a month now, so it seems to not have any showstoppers. This version would also fix LP#49609, and possibly also #27164 and #43465.

As timo promises to look after this, I'm convinced by ajmitch's opinion. The report looks okay otherwise to me. Get this in!

there's a new version in sid (2.4-1), I'll make a new UVF-request shortly

actually, I'll just post the changes after 2.3 here:

pam-krb5 2.4 (2006-10-05)

Fix compilation problems with Heimdal. Thanks, Matthijs Mohlmann and Douglas Engert.

Check for memory allocation failures when parsing PAM options rather than segfaulting.

Fix several places where an uninitialized context could have been passed into the argument parsing function.

Refactor the code to read configuration from krb5.conf to be easier to read and understand. Parse renew_lifetime immediately and always report an error rather than deferring time parsing until acquiring tickets.

Log errors (not just authentication failures) at the LOG_ERR level to match (some of) the recommendations of the Linux PAM documentation.

Log an error when an unknown option is passed via the PAM configuration.

New changes require new approval

while I still think this is okay, I'd be more happy to see the new diffstat and buildlog, and your confirmation that this actually works.

forgot to say, this installs and works on both dapper and edgy.

here the diffstat:
>> debdiff libpam-krb5_2.3-1.dsc libpam-krb5_2.4-1.dsc P diffstat
 CHANGES | 52 +++++++++++++
 NEWS | 22 +++++
 README | 2
 TODO | 13 ++-
 compat_heimdal.c | 14 ---
 compat_mit.c | 10 --
 configure | 86 +++++++++++----------
 configure.ac | 2
 context.c | 3
 debian/changelog | 9 ++
 logging.c | 2
 options.c | 216 ++++++++++++++++++++++++++++++++++---------------------
 pam_krb5.5 | 2
 pam_krb5.h | 11 --
 pam_krb5_acct.c | 11 ++
 pam_krb5_auth.c | 18 +++-
 pam_krb5_pass.c | 13 ++-
 support.c | 21 +----
 18 files changed, 319 insertions(+), 188 deletions(-)

Green light from my side on this sync!

[Updating] libpam-krb5 (1.2.0-3 [Ubuntu] < 2.4-1 [Debian])
 * Trying to add libpam-krb5...
  - <libpam-krb5_2.4-1.dsc: downloading from http://ftp.uk.debian.org/debian/>
  - <libpam-krb5_2.4-1.diff.gz: downloading from http://ftp.uk.debian.org/debian/>
  - <libpam-krb5_2.4.orig.tar.gz: downloading from http://ftp.uk.debian.org/debian/>
I: libpam-krb5 [universe] -> libpam-krb5_1.2.0-3 [universe].