--- pam-mysql-0.7~RC1.orig/Makefile.in +++ pam-mysql-0.7~RC1/Makefile.in @@ -110,7 +110,7 @@ CPPFLAGS = @CPPFLAGS@ LDFLAGS = @LDFLAGS@ LIBS = @LIBS@ -pam_mysql_la_LIBADD = +pam_mysql_la_LIBADD = -lpam pam_mysql_la_OBJECTS = pam_mysql.lo CFLAGS = @CFLAGS@ COMPILE = $(CC) $(DEFS) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS) --- pam-mysql-0.7~RC1.orig/aclocal.m4 +++ pam-mysql-0.7~RC1/aclocal.m4 @@ -297,7 +297,7 @@ if eval test -e "$dir/$libname_spec$shrext_cmds" -o -e "$dir/$libname_spec.$libext"; then name="$ssl_lib_name" if eval test -e "$dir/$libname_spec$shrext_cmds" -o -e "$dir/$libname_spec.$libext"; then - LIBS="$LIBS -l$crypto_lib_name -l$ssl_lib_name" + LIBS="$LIBS -l$crypto_lib_name" AC_CHECK_LIB([$crypto_lib_name], [CRYPTO_free], [ AC_CHECK_LIB([$ssl_lib_name], [SSL_CTX_new], [ --- pam-mysql-0.7~RC1.orig/debian/README.Debian +++ pam-mysql-0.7~RC1/debian/README.Debian @@ -0,0 +1,18 @@ +This version of pam-mysql supports using a config file, eg: +/etc/libpam-mysql.conf to hold configuration. This file needn't +be world readable and isn't per default in debian. You can change this +with the command ``dpkg-reconfigure -plow libpam-mysql''. + +In order to use this configuration file you simply type something like +the following in your pam-file (eg. /etc/pam.d/ssh): + +auth optional pam_mysql.so config_file=/etc/libpam-mysql.conf +account required pam_mysql.so config_file=/etc/libpam-mysql.conf + +And edit /etc/libpam-mysql.conf to your liking. The default assumes no +password for root to use mysql and simply uses the mysql accounts. + +This is not neccesarily a good idea. + + +Lars Bahner -- Mon Jan 26 02:56:00 CET 2009 --- pam-mysql-0.7~RC1.orig/debian/TODO +++ pam-mysql-0.7~RC1/debian/TODO @@ -0,0 +1,5 @@ +This package is in an experimental stage, until a few wrinkles +are ironed out. It should however be usable. + + +Sun Jan 25 23:23:16 CET 2009 - Lars Bahne --- pam-mysql-0.7~RC1.orig/debian/changelog +++ pam-mysql-0.7~RC1/debian/changelog @@ -0,0 +1,175 @@ +pam-mysql (0.7~RC1-4.1ubuntu1) yakkety; urgency=medium + + * Merge from Debian unstable. Remaining changes: + - Use autotools-dev to update config.{sub,guess} for new arches. + + -- Logan Rosen Mon, 16 May 2016 01:27:52 -0400 + +pam-mysql (0.7~RC1-4.1) unstable; urgency=medium + + * Non-maintainer upload. + * Build-Depend on libmysqlclient-dev instead of libmysqlclient15-dev + (Closes: #790455) + + -- Sebastian Andrzej Siewior Mon, 18 Apr 2016 21:45:50 +0200 + +pam-mysql (0.7~RC1-4ubuntu2) xenial; urgency=medium + + * Rebuild against libmysqlclient20. + + -- Robie Basak Tue, 05 Apr 2016 12:48:46 +0000 + +pam-mysql (0.7~RC1-4ubuntu1) trusty; urgency=medium + + * Use autotools-dev to update config.{sub,guess} for new arches. + + -- Logan Rosen Mon, 13 Jan 2014 18:59:27 -0500 + +pam-mysql (0.7~RC1-4build3) precise; urgency=low + + * Rebuild for libmysqlclient transition + + -- Clint Byrum Wed, 23 Nov 2011 23:59:46 -0800 + +pam-mysql (0.7~RC1-4build2) oneiric; urgency=low + + * Rebuild for OpenSSL 1.0.0. + + -- Colin Watson Tue, 17 May 2011 11:41:41 +0100 + +pam-mysql (0.7~RC1-4build1) lucid; urgency=low + + * Rebuild for libmysqlclient transition. + + -- Chuck Short Tue, 06 Apr 2010 07:52:56 -0400 + +pam-mysql (0.7~RC1-4) unstable; urgency=low + + * Set bogus passwd in pam_mysql.conf so that root won't be able to + log as root without password + * Added patch to link against libpam. (closes: #418500). Kudos to + Christian Hammers for patch + + -- Lars Bahner Fri, 30 Jan 2009 18:19:10 +0100 + +pam-mysql (0.7~RC1-3) experimental; urgency=low + + * debconf + * more cleanup + * added -f switch to rm in rules (closes: #490772) + * New version fixes bugs (closes: #367535, #368653, #238478) + + -- Lars Bahner Mon, 26 Jan 2009 08:36:06 +0100 + +pam-mysql (0.7~RC1-2) experimental; urgency=low + + * Bumped license to GPL-3 explicitly. + * Cleaned up packaging a bit + * Added conffile /etc/libpam-mysql.conf + + -- Lars Bahner Mon, 26 Jan 2009 03:24:56 +0100 + +pam-mysql (0.7~RC1-1) experimental; urgency=low + + * Added myself as uploader after request from Pawel. + * New upstream version (closes: #389347) + * Added patch to build with openssl (closes: #373834, #495532) + * Version 0.7 uses external config.file (closes: #297930 + + -- Lars Bahner Sun, 25 Jan 2009 22:44:08 +0100 + +pam-mysql (0.6.2-1) unstable; urgency=high + + * New upstream version (closes: #332714, #353589, #307861, #292097) + * Severity high because it fixes critical vulnerabilities (CVE-2005-4713, + CVE-2006-0056) + * Rebuilt against libmysqlclient15 (closes: #356745) + * Updated standards version and debhelper compatibility level + + -- Paweł Więcek Fri, 21 Apr 2006 07:20:56 +0200 + +pam-mysql (0.5.0-7) unstable; urgency=low + + * Added patch from Magnus Holmgren to fix behavior + when NULL passwords are used (closes: #297819) + * Rebuilt agains libmysqlclient12 + + -- Pawel Wiecek Wed, 18 May 2005 21:38:56 +0200 + +pam-mysql (0.5.0-6) unstable; urgency=low + + * Added patch by Kees Cook taken from from sf.net patch tracker and + adapted by Thomas Viehmann. + * Link against libpam. (Closes: #245790) + * Added -fno-strict-aliasing to CFLAGS. + + -- Pawel Wiecek Tue, 8 Jun 2004 22:27:54 +0200 + +pam-mysql (0.5.0-5) unstable; urgency=low + + * Added patch from Lehel Bernadt to allow + specification of mysql port (closes: #233813) + + -- Pawel Wiecek Tue, 9 Mar 2004 01:23:27 +0100 + +pam-mysql (0.5.0-4) unstable; urgency=low + + * Workaround a problem with crypt() calls (closes: #223486) + * Switched to off by default and documented MySQL logging (closes: #197028) + + -- Pawel Wiecek Thu, 22 Jan 2004 14:00:49 +0100 + +pam-mysql (0.5.0-3) unstable; urgency=low + + * Applied patch from Christian Hammers to fix maximum + database name string length (closes: #201261) + * Updated standards version (no changes required) + + -- Pawel Wiecek Tue, 14 Oct 2003 15:03:45 +0200 + +pam-mysql (0.5.0-2) unstable; urgency=low + + * Don't compile in debug mode anymore (closes: #195034) + * Updated standards version + + -- Pawel Wiecek Wed, 28 May 2003 12:42:17 +0200 + +pam-mysql (0.5.0-1) unstable; urgency=low + + * New upstream version (closes: #187015) + * Updated standards version + + -- Pawel Wiecek Tue, 29 Apr 2003 14:22:36 +0200 + +pam-mysql (0.4.7-1) unstable; urgency=low + + * New maintainer (closes: #107967, #77537, #97616) + + -- Pawel Wiecek Fri, 23 Nov 2001 13:20:26 +0100 + +pam-mysql (0.4.7-0.1) unstable; urgency=medium + + * Non-maintainer upload + * Fixess security bug that allows to gain access to plaintext passwords + remotely. This bug was reported with severity grave on 2000-11-12. + Fixes: #77537 + * Recompilation also linked against libmysqlclient10. Closes: #97616 + + -- Christian Hammers Sun, 20 May 2001 19:14:47 +0200 + +pam-mysql (0.2) unstable; urgency=low + + * NMU: Recompiled against libmysqlclient10. Closes: #97616 + + -- Christian Hammers Sat, 19 May 2001 18:40:08 +0200 + +pam-mysql (0.1) unstable; urgency=low + + * Initial Release. + + -- Michael Alan Dorman Wed, 1 Mar 2000 15:27:10 -0500 + +Local variables: +mode: debian-changelog +End: + --- pam-mysql-0.7~RC1.orig/debian/compat +++ pam-mysql-0.7~RC1/debian/compat @@ -0,0 +1 @@ +5 --- pam-mysql-0.7~RC1.orig/debian/conffiles +++ pam-mysql-0.7~RC1/debian/conffiles @@ -0,0 +1 @@ +/etc/pam-mysql.conf --- pam-mysql-0.7~RC1.orig/debian/control +++ pam-mysql-0.7~RC1/debian/control @@ -0,0 +1,16 @@ +Source: pam-mysql +Section: admin +Priority: extra +Maintainer: Ubuntu Developers +XSBC-Original-Maintainer: Paweł Więcek +Uploaders: Lars Bahner +Standards-Version: 3.8.0 +Build-Depends: libpam0g-dev, libmysqlclient-dev, debhelper (>= 5.0.0), libssl-dev, dpatch, autotools-dev + +Package: libpam-mysql +Architecture: any +Depends: ${shlibs:Depends}, ${misc:Depends} +Description: PAM module allowing authentication from a MySQL server + This module lets you use a MySQL database as a source of + authentication (but not session or other) information for PAM-enabled + apps. --- pam-mysql-0.7~RC1.orig/debian/copyright +++ pam-mysql-0.7~RC1/debian/copyright @@ -0,0 +1,21 @@ +This package was created by Michael Alan Dorman . +Later changed by Lars Bahner + +Copyright 2000, Michael Alan Dorman +Copyright 2009, Lars Bahner + + This program is free software; you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation; either version 3 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + + You should have received a copy of the GNU General Public License + along with this program; if not, write to the Free Software + Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA + +Full text of GPL is available in /usr/share/common-licenses/GPL-3 --- pam-mysql-0.7~RC1.orig/debian/dirs +++ pam-mysql-0.7~RC1/debian/dirs @@ -0,0 +1 @@ +etc --- pam-mysql-0.7~RC1.orig/debian/libpam-mysql.config +++ pam-mysql-0.7~RC1/debian/libpam-mysql.config @@ -0,0 +1,8 @@ +#!/bin/sh + +. /usr/share/debconf/confmodule + +if [ -e /etc/pam-mysql.conf ]; then + db_input low pam-mysql/config_file_noread || true + db_go +fi --- pam-mysql-0.7~RC1.orig/debian/libpam-mysql.docs +++ pam-mysql-0.7~RC1/debian/libpam-mysql.docs @@ -0,0 +1,3 @@ +CREDITS +NEWS +README --- pam-mysql-0.7~RC1.orig/debian/libpam-mysql.postinst +++ pam-mysql-0.7~RC1/debian/libpam-mysql.postinst @@ -0,0 +1,8 @@ +#!/bin/sh + +. /usr/share/debconf/confmodule + +if [ -e /etc/pam-mysql.conf ] ; then + db_get pam-mysql/config_file_noread + if [ "$RET" = "true" ]; then chmod 0600 /etc/pam-mysql.conf; fi +fi --- pam-mysql-0.7~RC1.orig/debian/libpam-mysql.substvarsold +++ pam-mysql-0.7~RC1/debian/libpam-mysql.substvarsold @@ -0,0 +1 @@ +shlibs:Depends=libc6 (>= 2.7-1), libmysqlclient15off (>= 5.0.27-1) --- pam-mysql-0.7~RC1.orig/debian/libpam-mysql.templates +++ pam-mysql-0.7~RC1/debian/libpam-mysql.templates @@ -0,0 +1,10 @@ +Template: pam-mysql/config_file_noread +Type: boolean +Default: true +Description: Chmod configuration file? + This version of pam-mysql has a configuration file which may include + passwords. Do you want to disable normal users from reading this + file? + . + There is probably no good reason *not* to do this. As the most common + reason to use the configuration file is to hide the password. --- pam-mysql-0.7~RC1.orig/debian/pam-mysql.conf +++ pam-mysql-0.7~RC1/debian/pam-mysql.conf @@ -0,0 +1,26 @@ +# Sample configuration file for pam-mysql + +users.host = localhost +users.database = mysql +users.db_user = root +users.db_passwd = YOUDIDN'TSETONEDIDYOU? +#users.where_clause = (host) +users.table = user +#users.update_table = (update_table) +users.user_column = User +users.password_column = Password +#users.status_column = (statcolumn) +users.password_crypt = 2 +#users.use_323_password = (use_323_passwd) +#users.use_md5 = yes +#users.where_clause = (where) +#users.disconnect_every_operation = (disconnect_every_op) *1 +#verbose = (verbose) +#log.enabled = (sqllog) +#log.table = (logtable) +#log.message_column = (logmsgcolumn) +#log.pid_column = (logpidcolumn) +#log.user_column = (logusercolumn) +#log.host_column = (loghostcolumn) +#log.rhost_column = (logrhostcolumn) *2 +#log.time_column = (logtimecolumn) --- pam-mysql-0.7~RC1.orig/debian/patches/00list +++ pam-mysql-0.7~RC1/debian/patches/00list @@ -0,0 +1,2 @@ +01_openssl.patch +02_libpam.patch --- pam-mysql-0.7~RC1.orig/debian/patches/01_openssl.patch +++ pam-mysql-0.7~RC1/debian/patches/01_openssl.patch @@ -0,0 +1,19 @@ +#! /bin/sh /usr/share/dpatch/dpatch-run +## 01_openssl.patch by Lars Bahner +## +## All lines beginning with `## DP:' are a description of the patch. +## DP: This patch makes sure Makefile references OPENSSL. + +@DPATCH@ +diff -Naur pam_mysql-0.7RC1/Makefile.in pam-mysql-0.7~RC1/Makefile.in +--- pam_mysql-0.7RC1/Makefile.in 2006-01-09 11:36:34.000000000 +0100 ++++ pam-mysql-0.7~RC1/Makefile.in 2009-01-25 22:03:56.000000000 +0100 +@@ -106,7 +106,7 @@ + LTLIBRARIES = $(lib_LTLIBRARIES) + + +-DEFS = @DEFS@ -I. -I$(srcdir) -I. ++DEFS = @DEFS@ -I. -I$(srcdir) -I. -DHAVE_OPENSSL + CPPFLAGS = @CPPFLAGS@ + LDFLAGS = @LDFLAGS@ + LIBS = @LIBS@ --- pam-mysql-0.7~RC1.orig/debian/patches/02_libpam.patch +++ pam-mysql-0.7~RC1/debian/patches/02_libpam.patch @@ -0,0 +1,20 @@ +#! /bin/sh /usr/share/dpatch/dpatch-run +## 02_libpam.patch by Lars Bahner +## +## All lines beginning with `## DP:' are a description of the patch. +## DP: This patch makes sure Makefile references -lpam +## to insure correct linking + +@DPATCH@ +diff -Naur old/Makefile.in pam-mysql_0.7~RC1/Makefile.in +--- old/Makefile.in 2009-01-30 18:11:47.000000000 +0100 ++++ pam-mysql_0.7~RC1/Makefile.in 2009-01-26 08:44:59.000000000 +0100 +@@ -110,7 +110,7 @@ + CPPFLAGS = @CPPFLAGS@ + LDFLAGS = @LDFLAGS@ + LIBS = @LIBS@ +-pam_mysql_la_LIBADD = -lpam ++pam_mysql_la_LIBADD = + pam_mysql_la_OBJECTS = pam_mysql.lo + CFLAGS = @CFLAGS@ + COMPILE = $(CC) $(DEFS) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS) --- pam-mysql-0.7~RC1.orig/debian/rules +++ pam-mysql-0.7~RC1/debian/rules @@ -0,0 +1,66 @@ +#!/usr/bin/make -f +# -*- makefile -*- + +include /usr/share/dpatch/dpatch.make + +arrange: arrange-stamp +arrange-stamp: install + touch arrange-stamp + +binary: binary-stamp +binary-stamp: binary-arch binary-indep + touch binary-stamp + +binary-arch: binary-arch-stamp +binary-arch-stamp: arrange + dh_testdir + dh_testroot + dh_installdocs + dh_installdebconf + dh_installchangelogs ChangeLog upstream + dh_link + dh_shlibdeps + dh_strip + dh_compress + dh_fixperms + dh_installdeb + dh_gencontrol + dh_md5sums + dh_builddeb + touch binary-arch-stamp + +binary-indep: binary-indep-stamp +binary-indep-stamp: arrange + touch binary-indep-stamp + +build: build-stamp patch +build-stamp: config + dh_testdir + $(MAKE) + touch build-stamp + +clean: unpatch + dh_testdir + dh_testroot + -$(MAKE) distclean + dh_autotools-dev_restoreconfig + dh_clean arrange-stamp binary-stamp binary-arch-stamp binary-indep-stamp build-stamp config-stamp install-stamp + +config: config-stamp +config-stamp: + dh_testdir + dh_autotools-dev_updateconfig + ./configure --prefix=/usr --with-openssl --with-pam_mods_dir=/lib/security --with-pam=/usr + touch config-stamp + +install: install-stamp +install-stamp: build + dh_testdir + dh_installdirs + $(MAKE) install DESTDIR=$(CURDIR)/debian/libpam-mysql + # No, we _definitely_ don't need libtool's .la files in lib/security + rm -f debian/libpam-mysql/lib/security/pam_mysql.la + install -m 640 debian/pam-mysql.conf debian/libpam-mysql/etc + touch install-stamp + +.PHONY: build clean binary-indep binary-arch binary install force-clean