Date: Fri, 26 Aug 2005 14:12:58 +0200 From: Konstantin Saurbier <saurbier@math.uni-bielefeld.de> To: ports@freebsd.org Subject: security/pam_ldap - update to version 1.8.0 Message-ID: <20050826121256.GB19571@math.uni-bielefeld.de>
next in thread | raw e-mail | index | archive | help
--dc+cDN39EJAMEtIO Content-Type: multipart/mixed; boundary="n8g4imXOkfNTN/H1" Content-Disposition: inline --n8g4imXOkfNTN/H1 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hi, i wrote a patch for security/pam_ldap to fix this security issue: http://www.kb.cert.org/vuls/id/778916 Please test this patch an comment any problems or bugs. For me it worked=20 well, but my access to different releases an architectures is limited to=20 5.4-RELEASE and 6.0-BETA3 on i386. Regards, Konstantin ------------------------------------------------------ Konstantin Saurbier Computerlabor Mathematik U5-138 Universitaet Bielefeld Universitaetsstr. 25 33501 Bielefeld email: saurbier@math.uni-bielefeld.de ------------------------------------------------------ --n8g4imXOkfNTN/H1 Content-Type: text/plain; charset=us-ascii Content-Disposition: attachment; filename="pam_ldap.patch" Content-Transfer-Encoding: quoted-printable --- Makefile.orig Fri Aug 26 15:11:00 2005 +++ Makefile Fri Aug 26 14:34:44 2005 @@ -6,7 +6,7 @@ # =20 PORTNAME=3D pam_ldap -PORTVERSION=3D 1.7.8 +PORTVERSION=3D 1.8.0 CATEGORIES=3D security net MASTER_SITES=3D http://www.padl.com/download/ \ ftp://ftp.padl.com/pub/ --- distinfo.orig Fri Aug 26 15:12:21 2005 +++ distinfo Fri Aug 26 14:37:07 2005 @@ -1,2 +1,2 @@ -MD5 (pam_ldap-178.tar.gz) =3D 222186c498d24a7035e8a7494fc0797d -SIZE (pam_ldap-178.tar.gz) =3D 127074 +MD5 (pam_ldap-180.tar.gz) =3D 627f053fdffb8267ba73261394e0ecde +SIZE (pam_ldap-180.tar.gz) =3D 127337 --- files/patch-aa.orig Fri Aug 26 15:11:31 2005 +++ files/patch-aa Fri Aug 26 15:07:45 2005 @@ -1,6 +1,6 @@ ---- Makefile.in.orig Sun Jun 26 13:33:47 2005 -+++ Makefile.in Sun Jun 26 13:35:09 2005 -@@ -434,19 +434,15 @@ +--- Makefile.in.orig Fri Aug 26 14:56:39 2005 ++++ Makefile.in Fri Aug 26 15:07:13 2005 +@@ -434,17 +434,13 @@ =20 install-exec-local: pam_ldap.so @$(NORMAL_INSTALL) @@ -17,10 +17,7 @@ + @if test ! -f $(DESTDIR)$(sysconfdir)/ldap.conf.dist; then \ $(mkinstalldirs) $(DESTDIR)$(sysconfdir); \ - $(INSTALL_DATA) -o root -g root $(srcdir)/ldap.conf $(DESTDIR)$(sysconf= dir)/ldap.conf; \ -+ $(INSTALL_DATA) -o root -g wheel $(srcdir)/ldap.conf $(DESTDIR)$(sysconf= dir)/ldap.conf.dist; \ ++ $(INSTALL_DATA) -o root -g wheel $(srcdir)/ldap.conf $(DESTDIR)$(syscon= fdir)/ldap.conf.dist; \ fi -- $(INSTALL_DATA) -o root -g root $(srcdir)/pam_ldap.5 $(DESTDIR)$(mandir)= /man5/pam_ldap.5 -+ $(INSTALL_DATA) -o root -g wheel $(srcdir)/pam_ldap.5 $(DESTDIR)$(mandir= )/man5/pam_ldap.5 =20 uninstall-local: - @$(NORMAL_UNINSTALL) --- pkg-message.orig Fri Aug 26 15:26:45 2005 +++ pkg-message Fri Aug 26 15:47:47 2005 @@ -1,8 +1,15 @@ =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D Copy %%PREFIX%%/etc/ldap.conf.dist to %%PREFIX%%/etc/ldap.conf, then edit -%%PREFIX%%/etc/ldap.conf in order to use this module. Add a line similar = to -the following to /etc/pam.conf on 4.X, or create an /etc/pam.d/ldap -on 5.X with a line similar to the following: +%%PREFIX%%/etc/ldap.conf in order to use this module. +Add a line similar to the following to /etc/pam.conf on 4.X: =20 login auth sufficient %%PREFIX%%/lib/pam_ldap.so + + +On 5.X insert the following on the appropiate lines in /etc/pam.d/system or +/etc/pam.d/<service-name>: + +auth sufficient pam_ldap.so no_warn try_first_pass +account sufficient pam_ldap.so=20 +session optional pam_ldap.so =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D --n8g4imXOkfNTN/H1-- --dc+cDN39EJAMEtIO Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (GNU/Linux) iD8DBQFDDwdIWkvQTx5k+y4RAsOTAJ92AlFucihW9UMgTCy0VPH5lEs5vQCfcQAr zkmDKCgAA1opXpr6oLBOjho= =5cQS -----END PGP SIGNATURE----- --dc+cDN39EJAMEtIO--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050826121256.GB19571>