Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 29 Aug 2005 13:50:34 +0200
From:      Konstantin Saurbier <saurbier@math.uni-bielefeld.de>
To:        FreeBSD-gnats-submit@FreeBSD.org
Subject:   ports/85435: [patch] update security/pam_ldap to 1.8.0
Message-ID:  <20050829115034.GA7585@math.uni-bielefeld.de>
Resent-Message-ID: <200508291200.j7TC0Z1H031908@freefall.freebsd.org>

next in thread | raw e-mail | index | archive | help

>Number:         85435
>Category:       ports
>Synopsis:       [patch] update security/pam_ldap to 1.8.0
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          update
>Submitter-Id:   current-users
>Arrival-Date:   Mon Aug 29 12:00:35 GMT 2005
>Closed-Date:
>Last-Modified:
>Originator:     Konstantin Saurbier
>Release:        FreeBSD 5.4-RELEASE-p1 amd64
>Organization:
Department of Mathematics, University of Bielefeld
>Environment:
System: FreeBSD mail1.math.uni-bielefeld.de 5.4-RELEASE-p1 FreeBSD 5.4-RELE=
ASE-p1 #5: Sun Jul 3 14:27:41 CEST 2005 root@mail1.math.uni-bielefeld.de:/u=
sr/obj/usr/src/sys/SERVER amd64
>Description:
	pam_ldap 1.7.8 has minor bug, this bug is fixed in version 1.8.0.
	http://www.kb.cert.org/vuls/id/778916
	I also included a fix for pkg-message to echo correct=20
	instructions for pam on 5.4.
>How-To-Repeat:
>Fix:
--- pam_ldap.patch begins here ---
--- Makefile.orig	Fri Aug 26 15:11:00 2005
+++ Makefile	Fri Aug 26 14:34:44 2005
@@ -6,7 +6,7 @@
 #
=20
 PORTNAME=3D	pam_ldap
-PORTVERSION=3D	1.7.8
+PORTVERSION=3D	1.8.0
 CATEGORIES=3D	security net
 MASTER_SITES=3D	http://www.padl.com/download/ \
 		ftp://ftp.padl.com/pub/

--- distinfo.orig	Fri Aug 26 15:12:21 2005
+++ distinfo	Fri Aug 26 14:37:07 2005
@@ -1,2 +1,2 @@
-MD5 (pam_ldap-178.tar.gz) =3D 222186c498d24a7035e8a7494fc0797d
-SIZE (pam_ldap-178.tar.gz) =3D 127074
+MD5 (pam_ldap-180.tar.gz) =3D 627f053fdffb8267ba73261394e0ecde
+SIZE (pam_ldap-180.tar.gz) =3D 127337

--- files/patch-aa.orig	Fri Aug 26 15:11:31 2005
+++ files/patch-aa	Fri Aug 26 15:07:45 2005
@@ -1,6 +1,6 @@
---- Makefile.in.orig	Sun Jun 26 13:33:47 2005
-+++ Makefile.in	Sun Jun 26 13:35:09 2005
-@@ -434,19 +434,15 @@
+--- Makefile.in.orig	Fri Aug 26 14:56:39 2005
++++ Makefile.in	Fri Aug 26 15:07:13 2005
+@@ -434,17 +434,13 @@
 =20
  install-exec-local: pam_ldap.so
  	@$(NORMAL_INSTALL)
@@ -17,10 +17,7 @@
 +	@if test ! -f $(DESTDIR)$(sysconfdir)/ldap.conf.dist; then \
  		$(mkinstalldirs) $(DESTDIR)$(sysconfdir); \
 -		$(INSTALL_DATA) -o root -g root $(srcdir)/ldap.conf $(DESTDIR)$(sysconf=
dir)/ldap.conf; \
-+	$(INSTALL_DATA) -o root -g wheel $(srcdir)/ldap.conf $(DESTDIR)$(sysconf=
dir)/ldap.conf.dist; \
++		$(INSTALL_DATA) -o root -g wheel $(srcdir)/ldap.conf $(DESTDIR)$(syscon=
fdir)/ldap.conf.dist; \
  	fi
--	$(INSTALL_DATA) -o root -g root $(srcdir)/pam_ldap.5 $(DESTDIR)$(mandir)=
/man5/pam_ldap.5
-+	$(INSTALL_DATA) -o root -g wheel $(srcdir)/pam_ldap.5 $(DESTDIR)$(mandir=
)/man5/pam_ldap.5
 =20
  uninstall-local:
- 	@$(NORMAL_UNINSTALL)

--- pkg-message.orig	Fri Aug 26 15:26:45 2005
+++ pkg-message	Fri Aug 26 15:47:47 2005
@@ -1,8 +1,15 @@
 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D
 Copy %%PREFIX%%/etc/ldap.conf.dist to %%PREFIX%%/etc/ldap.conf, then edit
-%%PREFIX%%/etc/ldap.conf in order to use this module.  Add a line similar =
to
-the following to /etc/pam.conf on 4.X, or create an /etc/pam.d/ldap
-on 5.X with a line similar to the following:
+%%PREFIX%%/etc/ldap.conf in order to use this module.
+Add a line similar to the following to /etc/pam.conf on 4.X:
=20
 login	auth	sufficient	%%PREFIX%%/lib/pam_ldap.so
+
+
+On 5.X insert the following on the appropiate lines in /etc/pam.d/system or
+/etc/pam.d/<service-name>:
+
+auth		sufficient	pam_ldap.so no_warn try_first_pass
+account		required	pam_ldap.so ignore_unknown_user ignore_authinfo_unavail
+session		optional	pam_ldap.so
 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D
--- pam_ldap.patch ends here ---
>Release-Note:
>Audit-Trail:
>Unformatted:



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050829115034.GA7585>