summaryrefslogtreecommitdiff
path: root/security/courier-authlib
AgeCommit message (Collapse)AuthorFilesLines
2007-09-05Move variable declarations to start of block to appease older C compilers.jlam2-1/+24
2007-08-30Skip the interpreter check on authsystem.passwd as we don't want tojlam1-1/+2
depend on the tcl-expect package. The package MESSAGE file already tells the user what to do.
2007-08-10Update security/courier-authlib to 0.59.3. Changes from version 0.58jlam5-50/+68
include: * authpipe.c (auth_pipe_pre): Fix leak when authpipe module is enabled, but the actual authpipe script/external prog is not installed. * authmysqlrc: Implement SSL-encrypted MySQL connections * authldaplib.c (l_simple_bind_s): Fix anon binds. * authldaplib.c (auth_ldap_enumerate): Fix LDAP account enumeration * userdb/makeuserdb.in: Added the -f option to makeuserdb * authldaplib.c: Try to recover when the LDAP server closes the persistent socket, for inactivity.
2007-07-04Make it easier to build and install packages "unprivileged", wherejlam1-1/+4
the owner of all installed files is a non-root user. This change affects most packages that require special users or groups by making them use the specified unprivileged user and group instead. (1) Add two new variables PKG_GROUPS_VARS and PKG_USERS_VARS to unprivileged.mk. These two variables are lists of other bmake variables that define package-specific users and groups. Packages that have user-settable variables for users and groups, e.g. apache and APACHE_{USER,GROUP}, courier-mta and COURIER_{USER,GROUP}, etc., should list these variables in PKG_USERS_VARS and PKG_GROUPS_VARS so that unprivileged.mk can know to set them to ${UNPRIVILEGED_USER} and ${UNPRIVILEGED_GROUP}. (2) Modify packages to use PKG_GROUPS_VARS and PKG_USERS_VARS.
2006-07-08Change the format of BUILDLINK_ORDER to contain depth information as well,jlam1-2/+2
and add a new helper target and script, "show-buildlink3", that outputs a listing of the buildlink3.mk files included as well as the depth at which they are included. For example, "make show-buildlink3" in fonts/Xft2 displays: zlib fontconfig iconv zlib freetype2 expat freetype2 Xrender renderproto
2006-07-08Track information in a new variable BUILDLINK_ORDER that informs usjlam1-1/+2
of the order in which buildlink3.mk files are (recursively) included by a package Makefile.
2006-07-02This package needs expect(1). Bumped PKGREVISION.rillig1-2/+3
2006-05-31The databases/openldap package has been split in -client and -server componentghen1-2/+2
packages. Convert LDAP-based applications to depend on openldap-client, and bump PKGREVISION for those that depend on it by default.
2006-05-09Uses C++.joerg1-1/+2
2006-04-28Substitute for COURIER_{USER,GROUP} in a few more locations.jlam1-1/+3
2006-04-23Modify packages that set PKG_USERS and PKG_GROUPS to follow the newjlam1-2/+2
syntax as specified in pkgsrc/mk/install/bsd.pkginstall.mk:1.47.
2006-04-13BROKEN_GETTEXT_DETECTION already defaults to "no".jlam1-2/+1
2006-04-12Aligned the last line of the buildlink3.mk files with the first line, sorillig1-2/+2
that they look nicer.
2006-04-06Over 1200 files touched but no revisions bumped :)reed1-3/+3
RECOMMENDED is removed. It becomes ABI_DEPENDS. BUILDLINK_RECOMMENDED.foo becomes BUILDLINK_ABI_DEPENDS.foo. BUILDLINK_DEPENDS.foo becomes BUILDLINK_API_DEPENDS.foo. BUILDLINK_DEPENDS does not change. IGNORE_RECOMMENDED (which defaulted to "no") becomes USE_ABI_DEPENDS which defaults to "yes". Added to obsolete.mk checking for IGNORE_RECOMMENDED. I did not manually go through and fix any aesthetic tab/spacing issues. I have tested the above patch on DragonFly building and packaging subversion and pkglint and their many dependencies. I have also tested USE_ABI_DEPENDS=no on my NetBSD workstation (where I have used IGNORE_RECOMMENDED for a long time). I have been an active user of IGNORE_RECOMMENDED since it was available. As suggested, I removed the documentation sentences suggesting bumping for "security" issues. As discussed on tech-pkg. I will commit to revbump, pkglint, pkg_install, createbuildlink separately. Note that if you use wip, it will fail! I will commit to pkgsrc-wip later (within day).
2006-03-14Modify the pkginstall framework so that it manages all aspects ofjlam1-3/+1
INSTALL/DEINSTALL script creation within pkgsrc. If an INSTALL or DEINSTALL script is found in the package directory, it is automatically used as a template for the pkginstall-generated scripts. If instead, they should be used simply as the full scripts, then the package Makefile should set INSTALL_SRC or DEINSTALL_SRC explicitly, e.g.: INSTALL_SRC= ${PKGDIR}/INSTALL DEINSTALL_SRC= # emtpy As part of the restructuring of the pkginstall framework internals, we now *always* generate temporary INSTALL or DEINSTALL scripts. By comparing these temporary scripts with minimal INSTALL/DEINSTALL scripts formed from only the base templates, we determine whether or not the INSTALL/DEINSTALL scripts are actually needed by the package (see the generate-install-scripts target in bsd.pkginstall.mk). In addition, more variables in the framework have been made private. The *_EXTRA_TMPL variables have been renamed to *_TEMPLATE, which are more sensible names given the very few exported variables in this framework. The only public variables relating to the templates are: INSTALL_SRC INSTALL_TEMPLATE DEINSTALL_SRC DEINSTALL_TEMPLATE HEADER_TEMPLATE The packages in pkgsrc have been modified to reflect the changes in the pkginstall framework.
2006-02-05Recursive revision bump / recommended bump for gettext ABI change.joerg2-3/+4
2006-01-10Use mk/mysql.buildlink3.mk instead of databases/mysqlX-client/bl3.mk,ghen2-3/+4
same for pgsql.bl3.mk. Bump PKGREVISION. Ok by wiz.
2006-01-03Update security/courier-authlib to 0.58. Changes from version 0.57 include:jlam3-19/+6
* Re-enable pam_acct_mgmt hook. * Add support for shadow password expiration. * Configurable daemon socket timeout, * Add a section for LDAP environment variable options. * Replace LDAP_SERVER and LDAP_PORT settings with LDAP_URI, which obsoletes LDAP_TLS. * Fix LDAP error checking.
2005-12-29Remove USE_PKGINSTALL from pkgsrc now that mk/install/pkginstall.mkjlam1-2/+1
automatically detects whether we want the pkginstall machinery to be used by the package Makefile.
2005-12-17Change my MAINTAINER email address to the one I've been using forjlam1-2/+2
pkgsrc work.
2005-12-05Ran "pkglint --autofix", which corrected some of the quoting issues inrillig2-7/+7
CONFIGURE_ARGS.
2005-12-05Fixed pkglint warnings. The warnings are mostly quoting issues, forrillig2-7/+7
example MAKE_ENV+=FOO=${BAR} is changed to MAKE_ENV+=FOO=${BAR:Q}. Some other changes are outlined in http://mail-index.netbsd.org/tech-pkg/2005/12/02/0034.html
2005-11-07Only install the authldap.schema file if the "ldap" package option isjlam2-3/+3
specified.
2005-08-23The real user name in PKG_USERS does not need to be escaped with doublerillig1-2/+2
backslashes anymore. A single backslash is enough. Changed the definition in all affected packages. For those that are not caught, an additional check is placed into bsd.pkginstall.mk.
2005-08-11Update security/courier-authlib to 0.57. Changes from version 0.55jlam7-115/+172
include: * authlib: create the authtest and authpasswd manual pages. * authdaemon.c (auth_generic): Silly bug in auth_generic(). * authldaplib.c (auth_ldap_do3): Fix call of authcryptpasswd(). * authpgsqllib.c (auth_pgsql_setpass): Ditto. * authmysqllib.c (auth_mysql_setpass): Ditto. * authmysqllib.c (auth_mysql_setpass): Fix a memory leak. * authpipe: more fixes to the authpipe module. * authpipe: various fixes to the authpipe module. * authpipe.c (auth_pipe_pre): Fix zombies created by the authpipe module. * New authpipe authentication module. * authldap.schema: Add mailhost to the recommended LDAP schema. * README_authlib.sgml: Document updated authpipe protocol. * cryptpassword.c (authcryptpasswd): Fix handling of encryption hints. * checkpassword.c (do_authcheckpassword): Ignore {CRYPT} prefix on crypted passwords. * checkpasswordsha1.c (authcheckpasswordsha1): Fix {SHA256} passwords. * authdaemond.c: Strip full name/gecos field after the first comma. * authdaemond: Pass LOGGEROPTS option to authdaemond. * liblog/logger.c: Fix wrong args to setuidgid(). * liblog/logger.c: Added -droproot option to courierlogger. * liblock/lockdaemon.c: Try to recover if upgraded daemon process runs under a different uid. * Changed -uid and -gid options to -user and -group for consistency with couriertcpd. Change them to affect courierlogger itself, after it has spawned any child. * Optional default domain for authentication requests. * Fix the error code when an empty password is provided.
2005-07-16Get rid of USE_PERL5. The new way to express needing the Perl executablejlam1-3/+2
around at either build-time or at run-time is: USE_TOOLS+= perl # build-time USE_TOOLS+= perl:run # run-time Also remove some places where perl5/buildlink3.mk was being included by a package Makefile, but all that the package wanted was the Perl executable.
2005-06-24Prevent paths to the build directories from being included in the package.kristerw1-2/+4
Bump PKGREVISION.
2005-05-31Rename option PAM to pam (so all options are lower case). Backwardsdillo1-3/+3
compatibility provided via PKG_OPTIONS_LEGACY_OPTS.
2005-05-31Packages have no business modifying PKG_DEFAULT_OPTIONS -- it's adillo1-4/+2
user settable variable. Set PKG_SUGGESTED_OPTIONS instead. Also, make use of PKG_OPTIONS_LEGACY_VARS. Reviewed by wiz.
2005-05-22Remove USE_GNU_TOOLS and replace with the correct USE_TOOLS definitions:jlam1-2/+2
USE_GNU_TOOLS -> USE_TOOLS awk -> gawk m4 -> gm4 make -> gmake sed -> gsed yacc -> bison
2005-05-13Pass the install-time definition of variables that specify the locationsjlam1-3/+4
of the example config files through to sub-make processes. Since courier-authlib uses GNU automake, we need to set AM_MAKEFLAGS to the correct value. This fixes the installation of the *.dist files into ${PREFIX}/share/examples/courier-authlib.
2005-05-02RCD_SCRIPTS_EXAMPLEDIR is no longer customizable.reed1-1/+2
And always is defined as share/examples/rc.d which was the default before. This rc.d scripts are not automatically added to PLISTs now also. So add to each corresponding PLIST as required. This was discussed on tech-pkg in late January and late April. Todo: remove the RCD_SCRIPTS_EXAMPLEDIR uses in MESSAGES and elsewhere and remove the RCD_SCRIPTS_EXAMPLEDIR itself.
2005-04-11Remove USE_BUILDLINK3 and NO_BUILDLINK; these are no longer used.tv1-2/+1
2005-03-24Strip off any leading "-Wl," in the compiler and linker flags beforejlam2-10/+82
the courier Makefile adds it to all of the flags again. This avoids situations where you end up with a flag that looks like "-Wl,-Wl,...". This should fix the problem noted in pkg/29777.
2005-03-22Update security/courier-authlib to courier-authlib-0.55. Changes fromjlam2-7/+6
version 0.54 include: * authsystem.passwd.in: Explicitly set LC_ALL to en_US * SASL: Added CRAM-SHA256 authentication method (experimental). * courierauthdebug.h: Macro dprintf conflicts with new glibc.
2005-03-18Avoid possibly linking everything against -lintl when PostgreSQLjlam4-8/+23
support is built into courier-authlib -- -lintl is only needed by the authpgsql authentication module. This avoids problems when linking clients with -lcourierauth and the linker thinks -lintl is needed when it really doesn't. Bump the PKGREVISION to 3.
2005-02-26Install some documentation files for courier-authlib, but only install thejlam3-5/+38
relevant ones depending on the options chosen. This fixes PR pkg/29465. Bump the PKGREVISION to 2.
2005-02-24Add RMD160 digests.agc1-1/+2
2005-02-21Fix the authdaemond rc.d script to invoke the correct script to startjlam2-3/+5
the authentication daemon. Fix provided by Inseo Park in private mail. Also, honor VARBASE. Bump the PKGREVISION to 1.
2005-02-18Update security/courier-authlib to 0.54. Changes from version 0.53jlam6-16/+47
include: * userdb/makeuserdb.in: Report dangling symlinks.
2005-02-10Rearrange so that the MAINTAINER and HOMEPAGE are stored with thejlam2-6/+6
package Makefile instead of Makefile.common. Also, fix the HOMEPAGE for the courier-authlib component of the Courier package.
2005-02-10Add a buildlink3.mk file for use by other package Makefiles.jlam1-0/+18
2005-02-10Import courier-authlib-0.53 as security/courier-authlib.jlam10-0/+419
The Courier authentication library provides authentication services for other Courier applications. In this context, the term "authentication" refers to the following functions: 1. Take a userid or a loginid, and a password. Determine whether the loginid and the password are valid. 2. Given a userid, obtain the following information about the userid: A. The account's home directory. B. The numeric system userid and groupid that owns all files associated with this account. C. The location of the account's maildir. D. Any maildir quota defined for this account. See the Courier documentation for more information on maildir quotas. E. Other miscellaneous account-specific options. 3. Change the password associated with a loginid. 4. Obtain a complete list of all loginids.
generated by cgit v1.2.3 (git 2.39.1) at 2024-06-06 22:37:29 +0000