Update pam-mysql to 0.7RC1. This fixes a number of security issues.

From NEWS:
Version 0.7-RC1   2006/1/10  <moriyoshi@users.sourceforge.net>

* Add a option "disconnect_every_op" option that forces pam_mysql to
  disconnect from the database every operation (PR #1325395). -moriyoshi
* Use geteuid() instead of getuid() to check if the current user is authorized
  to change the password (PR #1338667). -moriyoshi
* Allow root (uid=0) to change the passwords of other users without their old
  password. -moriyoshi


Version 0.7-pre3  2005/9/29  <moriyoshi@users.sourceforge.net>

* Changed handling of the "where" option to not escape meta characters
  (PR #1261484). -moriyoshi
* Overhauled the SQL logging facility (PR #1256243). -moriyoshi
* Added logrhostcolumn (log.rhost_column) option that enables you to log the
  value of the "rhost" item specified by the application. -moriyoshi
* Fixed possible security flaw (though not considered to be severe). -moriyoshi
* Fixed memory leaks spotted when "config_file" option is used. -moriyoshi
* Fixed try_first_pass behaviour. -moriyoshi
* Changed option parsing behaviour so "=" following each option name is not
  needed. -moriyoshi


Version 0.7-pre2  2005/9/18  <moriyoshi@users.sourceforge.net>

* Changed column name handling to not escape meta characters. Now you can
  specify an expression to every XXXcolumn variable like "CONCAT(a, b, c)".
  -moriyoshi
* Supported SHA1 hash (PR #1117036). -moriyoshi, alexeen
* Supported use_first_pass and try_first_pass options. -moriyoshi


Version 0.7-pre1  2005/6/13  <moriyoshi@users.sourceforge.net>

* Support for NSS-mysql style configuration file which is inspired
  by the Florian's work. -moriyoshi


Version 0.6.2  2005/9/29  <moriyoshi@users.sourceforge.net>

* Overhauled the SQL logging facility (PR #1256243). -moriyoshi
* Fixed possible security flaw (though not considered to be severe). -moriyoshi


Version 0.6.1  2005/9/18  <moriyoshi@users.sourceforge.net>

* Added use_323_passwd option that allows you to use an encryption function
  used in the old MySQL versions (3.23.x). -moriyoshi, Daniel Renaud
* Fixed account management code that wouldn't work at all :-p -moriyoshi
* Included pam_mysql.spec to the tarball by default. This enables you to
  make a RPM with the following oneliner: (rpmbuild -tb pam_mysql.tar.gz).
  -moriyoshi
* Fixed compile failure that occurs with the old mysql_config (< 4.0.16).
  -moriyoshi
* Fixed compile failure on Solaris when --with-openssl is specified to the
  configure script.


Version 0.6  2005/6/13  <moriyoshi@users.sourceforge.net>

* Adopted autoconf / automake for build system. -moriyoshi
* Portable MD5 support by using OpenSSL / Cyrus-SASL. -moriyoshi
* MySQL library detection. -moriyoshi
* Added RPM spec file. -moriyoshi
* Tidied up the entire code for security and maintainability. -moriyoshi
* Modified log output to be more verbose. -moriyoshi
* Changed log facility type to LOG_AUTHPRIV as per the recommendation in
  the PAM documentation. -moriyoshi
* Added support for unix socket and non-default ports. -moriyoshi
* Added account management and authentication token alteration code. -moriyoshi
* Remove default values for string parameters for the sake of performance.
  -moriyoshi
* Enhanced SQL logging function to log session state as well. -moriyoshi
* Solaris support. -moriyoshi

1 files changed, 12 insertions, 19 deletions

diff --git a/security/pam-mysql/Makefile b/security/pam-mysql/Makefile
index e40721dbe8e..65a317f5e8c 100644
--- a/security/pam-mysql/Makefile
+++ b/security/pam-mysql/Makefile
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.5 2006/03/04 21:30:37 jlam Exp $
+# $NetBSD: Makefile,v 1.6 2006/03/07 01:22:16 joerg Exp $
 
-DISTNAME=	pam_mysql-0.5
-PKGNAME=	${DISTNAME:S/_/-/}
-PKGREVISION=	2
+DISTNAME=	pam_mysql-0.7RC1
+PKGNAME=	${DISTNAME:S/_/-/:S/RC/rc/}
 CATEGORIES=	security
 MASTER_SITES=	${MASTER_SITE_SOURCEFORGE:=pam-mysql/}
 
@@ -10,26 +9,20 @@ MAINTAINER=	pkgsrc-users@NetBSD.org
 HOMEPAGE=	http://pam-mysql.sourceforge.net/
 COMMENT=	PAM module for authenticating with MySQL
 
-WRKSRC=		${WRKDIR}/pam_mysql
 DOCDIR=		${PREFIX}/share/doc/pam-mysql
 
-INSTALLATION_DIRS=	lib
+GNU_CONFIGURE=	yes
+USE_LIBTOOL=	yes
 
-do-build:
-	${CC} -fpic -DPIC -Wall -I${LOCALBASE}/include \
-		-c ${WRKSRC}/pam_mysql.c -o ${WRKSRC}/pam_mysql.o
-	${LD} -x --shared -o ${WRKSRC}/pam_mysql.so ${WRKSRC}/pam_mysql.o \
-		-lpam -lcrypt -L${LOCALBASE}/lib/mysql \
-		${COMPILER_RPATH_FLAG}${LOCALBASE}/lib/mysql -lmysqlclient \
-		-L${LOCALBASE}/lib ${COMPILER_RPATH_FLAG}${LOCALBASE}/lib
+CONFIGURE_ARGS+=	--with-mysql=${BUILDLINK_PREFIX.mysql-client:Q}
+CONFIGURE_ARGS+=	--with-pam-mods-dir=${PREFIX:Q}/lib/security
+CONFIGURE_ARGS+=	--disable-static
 
-do-install:
-	${INSTALL_LIB} ${WRKSRC}/pam_mysql.so ${PREFIX}/lib
-	${INSTALL_DATA_DIR} ${DOCDIR}
-	${INSTALL_DATA} ${WRKSRC}/Changelog ${DOCDIR}
-	${INSTALL_DATA} ${WRKSRC}/CREDITS ${DOCDIR}
-	${INSTALL_DATA} ${WRKSRC}/Readme ${DOCDIR}
+post-install:
+	${INSTALL_DATA_DIR} ${DOCDIR:Q}
+	cd ${WRKSRC:Q} && ${INSTALL_DATA} CREDITS ChangeLog README ${DOCDIR:Q}
 
+.include "../../security/openssl/buildlink3.mk"
 .include "../../mk/mysql.buildlink3.mk"
 .include "../../mk/pam.buildlink3.mk"
 .include "../../mk/bsd.pkg.mk"