From owner-freebsd-ports-bugs@FreeBSD.ORG Mon Aug 29 12:00:41 2005 Return-Path: X-Original-To: freebsd-ports-bugs@hub.freebsd.org Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 42F2716A422 for ; Mon, 29 Aug 2005 12:00:41 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id BBEEC43D53 for ; Mon, 29 Aug 2005 12:00:35 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.3/8.13.3) with ESMTP id j7TC0ZGr031917 for ; Mon, 29 Aug 2005 12:00:35 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.3/8.13.1/Submit) id j7TC0Z1H031908; Mon, 29 Aug 2005 12:00:35 GMT (envelope-from gnats) Resent-Date: Mon, 29 Aug 2005 12:00:35 GMT Resent-Message-Id: <200508291200.j7TC0Z1H031908@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-ports-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Konstantin Saurbier Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 332BF16A41F for ; Mon, 29 Aug 2005 11:50:42 +0000 (GMT) (envelope-from saurbier@math.uni-bielefeld.de) Received: from mail1.math.uni-bielefeld.de (mail1.math.uni-bielefeld.de [129.70.14.32]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7D69743D6E for ; Mon, 29 Aug 2005 11:50:35 +0000 (GMT) (envelope-from saurbier@math.uni-bielefeld.de) Received: from math.uni-bielefeld.de (fuji11.math.uni-bielefeld.de [129.70.15.131]) by mail1.math.uni-bielefeld.de (Postfix) with SMTP id DC9E695823; Mon, 29 Aug 2005 13:50:34 +0200 (CEST) Received: (nullmailer pid 7822 invoked by uid 4079); Mon, 29 Aug 2005 11:50:34 -0000 Message-Id: <20050829115034.GA7585@math.uni-bielefeld.de> Date: Mon, 29 Aug 2005 13:50:34 +0200 From: Konstantin Saurbier To: FreeBSD-gnats-submit@FreeBSD.org Cc: Subject: ports/85435: [patch] update security/pam_ldap to 1.8.0 X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Aug 2005 12:00:41 -0000 >Number: 85435 >Category: ports >Synopsis: [patch] update security/pam_ldap to 1.8.0 >Confidential: no >Severity: non-critical >Priority: medium >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: update >Submitter-Id: current-users >Arrival-Date: Mon Aug 29 12:00:35 GMT 2005 >Closed-Date: >Last-Modified: >Originator: Konstantin Saurbier >Release: FreeBSD 5.4-RELEASE-p1 amd64 >Organization: Department of Mathematics, University of Bielefeld >Environment: System: FreeBSD mail1.math.uni-bielefeld.de 5.4-RELEASE-p1 FreeBSD 5.4-RELE= ASE-p1 #5: Sun Jul 3 14:27:41 CEST 2005 root@mail1.math.uni-bielefeld.de:/u= sr/obj/usr/src/sys/SERVER amd64 >Description: pam_ldap 1.7.8 has minor bug, this bug is fixed in version 1.8.0. http://www.kb.cert.org/vuls/id/778916 I also included a fix for pkg-message to echo correct=20 instructions for pam on 5.4. >How-To-Repeat: >Fix: --- pam_ldap.patch begins here --- --- Makefile.orig Fri Aug 26 15:11:00 2005 +++ Makefile Fri Aug 26 14:34:44 2005 @@ -6,7 +6,7 @@ # =20 PORTNAME=3D pam_ldap -PORTVERSION=3D 1.7.8 +PORTVERSION=3D 1.8.0 CATEGORIES=3D security net MASTER_SITES=3D http://www.padl.com/download/ \ ftp://ftp.padl.com/pub/ --- distinfo.orig Fri Aug 26 15:12:21 2005 +++ distinfo Fri Aug 26 14:37:07 2005 @@ -1,2 +1,2 @@ -MD5 (pam_ldap-178.tar.gz) =3D 222186c498d24a7035e8a7494fc0797d -SIZE (pam_ldap-178.tar.gz) =3D 127074 +MD5 (pam_ldap-180.tar.gz) =3D 627f053fdffb8267ba73261394e0ecde +SIZE (pam_ldap-180.tar.gz) =3D 127337 --- files/patch-aa.orig Fri Aug 26 15:11:31 2005 +++ files/patch-aa Fri Aug 26 15:07:45 2005 @@ -1,6 +1,6 @@ ---- Makefile.in.orig Sun Jun 26 13:33:47 2005 -+++ Makefile.in Sun Jun 26 13:35:09 2005 -@@ -434,19 +434,15 @@ +--- Makefile.in.orig Fri Aug 26 14:56:39 2005 ++++ Makefile.in Fri Aug 26 15:07:13 2005 +@@ -434,17 +434,13 @@ =20 install-exec-local: pam_ldap.so @$(NORMAL_INSTALL) @@ -17,10 +17,7 @@ + @if test ! -f $(DESTDIR)$(sysconfdir)/ldap.conf.dist; then \ $(mkinstalldirs) $(DESTDIR)$(sysconfdir); \ - $(INSTALL_DATA) -o root -g root $(srcdir)/ldap.conf $(DESTDIR)$(sysconf= dir)/ldap.conf; \ -+ $(INSTALL_DATA) -o root -g wheel $(srcdir)/ldap.conf $(DESTDIR)$(sysconf= dir)/ldap.conf.dist; \ ++ $(INSTALL_DATA) -o root -g wheel $(srcdir)/ldap.conf $(DESTDIR)$(syscon= fdir)/ldap.conf.dist; \ fi -- $(INSTALL_DATA) -o root -g root $(srcdir)/pam_ldap.5 $(DESTDIR)$(mandir)= /man5/pam_ldap.5 -+ $(INSTALL_DATA) -o root -g wheel $(srcdir)/pam_ldap.5 $(DESTDIR)$(mandir= )/man5/pam_ldap.5 =20 uninstall-local: - @$(NORMAL_UNINSTALL) --- pkg-message.orig Fri Aug 26 15:26:45 2005 +++ pkg-message Fri Aug 26 15:47:47 2005 @@ -1,8 +1,15 @@ =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D Copy %%PREFIX%%/etc/ldap.conf.dist to %%PREFIX%%/etc/ldap.conf, then edit -%%PREFIX%%/etc/ldap.conf in order to use this module. Add a line similar = to -the following to /etc/pam.conf on 4.X, or create an /etc/pam.d/ldap -on 5.X with a line similar to the following: +%%PREFIX%%/etc/ldap.conf in order to use this module. +Add a line similar to the following to /etc/pam.conf on 4.X: =20 login auth sufficient %%PREFIX%%/lib/pam_ldap.so + + +On 5.X insert the following on the appropiate lines in /etc/pam.d/system or +/etc/pam.d/: + +auth sufficient pam_ldap.so no_warn try_first_pass +account required pam_ldap.so ignore_unknown_user ignore_authinfo_unavail +session optional pam_ldap.so =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D --- pam_ldap.patch ends here --- >Release-Note: >Audit-Trail: >Unformatted: