summaryrefslogtreecommitdiff
path: root/security/courier-authlib
AgeCommit message (Collapse)AuthorFilesLines
2014-06-14fix SMF Manifest installation by not overwriting INSTALLATION_DIRSwiedi1-2/+2
2014-05-29Bump for perl-5.20.0.wiz1-2/+2
Do it for all packages that * mention perl, or * have a directory name starting with p5-*, or * depend on a package starting with p5- like last time, for 5.18, where this didn't lead to complaints. Let me know if you have any this time.
2014-05-06Buildlink libiconv using build dependency method for OpenBSD. The courier-rodent1-1/+6
{authlib,maildir} packages won't build otherwise (at least with PREFER_PKGSRC=yes).
2014-03-26Fix SMF manifests that were not populated properly.fhajny1-21/+21
2014-03-11Import initial SMF support for individual packages.jperkin1-0/+37
2014-03-11Remove example rc.d scripts from PLISTs.jperkin1-2/+1
These are now handled dynamically if INIT_SYSTEM is set to "rc.d", or ignored otherwise.
2014-02-12Recursive PKGREVISION bump for OpenSSL API version bump.tron1-2/+2
2013-05-31Bump all packages for perl-5.18, thatwiz1-2/+2
a) refer 'perl' in their Makefile, or b) have a directory name of p5-*, or c) have any dependency on any p5-* package Like last time, where this caused no complaints.
2013-03-02Bump PKGREVISION for mysql default change to 55.wiz1-2/+2
2013-02-06PKGREVISION bumps for the security/openssl 1.0.1d update.jperkin1-2/+2
2012-12-16recursive bump from cyrus-sasl libsasl2 shlib major bump.obache1-2/+2
2012-10-23Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days.asau1-3/+1
2012-10-03Bump all packages that use perl, or depend on a p5-* package, orwiz1-1/+2
are called p5-*. I hope that's all of them.
2012-06-09Changes 0.64.0:adam5-32/+33
* authpam.c (callback_pam): Call pam_end() after an authentication attempt. * Makefile.am: Renamed authstaticlist.h to courierauthstaticlist.h, and added it to the list of header files that 'make install' puts into includedir. * Fix gcc 4.6 warnings * courier.spec.in: switch to systemd. * Fix autoconf warnings. * courier-authlib.spec: Make rmplint happy.
2012-05-13"Convert" to destdir by moving one line higher up.wiz1-3/+3
2012-03-09Force --with-waitfunc=wait3 on SunOS, fixes several courier-* packages.fhajny1-1/+7
2010-11-10pkglint fixesadam3-15/+12
2010-06-15courier-authlib-0.63.0:pettai5-30/+29
* authldapescape.c: Factor out LDAP string escape function. * authldap.schema: Various fixes * authldap.ldif (olcObjectClasses): Create LDIF format schema from authldap.schema * authoption.c (auth_getoptionenvint): For account options that are parsed to an int, an option value that begins with t, T, y, or Y is evaluated as 1, other alphabetic values as 0; so that 'true' or 'yes' get evaluated as 1. (See the Changelog for the previous releases) Based on patch(es) from PR pkg/42989 by Brian Candler
2010-03-21Reset maintainer, developer lost his commit bit.wiz1-2/+2
2009-12-15Recursive bump for libltdljoerg1-1/+2
2009-07-02Update courier-authlib to 0.62.2.obache5-18/+19
Include security fix for CVE-2008-2380 and requested by PR#41023 (approved by wiz@). 0.62.2 This release corrects a makefile compatibility problem with bash 4. 0.62.1 This release correct a couple of minor compiler warnings and errors. * cryptpassword.c: Fix compiler warnings * checkpasswordsha1.c: Fix compiler warnings. * authldaplib.c (auth_ldap_enumerate): Fix typo. 0.62.0 This release adds support for additional hash functions, and an update to the Postgres driver that removes potentional SQL injection vulnerabilities in some circumstances. * authpgsqllib.c: Use PQescapeStringConn() instead of removing all apostrophes from query parameters. This fixes a potential SQL injection vulnerability if the Postgres database uses a non-Latin locale. * Added support for {SSHA}-encrypted passwords. Based on a patch by Zou bin <zb@bisp.com>. * Added support for {SHA512} hash function
2009-06-27Add ${TRUE} to end of the GENERATE_PLIST to avoid picked up exit code of lastobache1-1/+2
test command.
2009-06-14Remove @dirrm related logic.joerg1-7/+1
2009-05-19Use standard location for LICENSE line (in MAINTAINER/HOMEPAGE/COMMENTwiz1-3/+2
block). Uncomment some commented out LICENSE lines while here.
2009-03-20Simply and speed up buildlink3.mk files and processing.joerg1-13/+6
This changes the buildlink3.mk files to use an include guard for the recursive include. The use of BUILDLINK_DEPTH, BUILDLINK_DEPENDS, BUILDLINK_PACKAGES and BUILDLINK_ORDER is handled by a single new variable BUILDLINK_TREE. Each buildlink3.mk file adds a pair of enter/exit marker, which can be used to reconstruct the tree and to determine first level includes. Avoiding := for large variables (BUILDLINK_ORDER) speeds up parse time as += has linear complexity. The include guard reduces system time by avoiding reading files over and over again. For complex packages this reduces both %user and %sys time to half of the former time.
2008-10-01Revert to previous revision and remove bin/makedat (it was conflict with ↵obache1-17/+1
maildrop?). Additional entries are optionally and already handled in Makefile and options.mk. Re: PR 39661
2008-09-28Upgrade courier-authlib to version 0.61.0 in order to fix CVE-2008-2667,tonnerre5-61/+95
finally. While here, fix PLIST and depkglint a bit. Also, fix the horrid abuse of libtool. Changes since 0.60.2: * courier-authlib.spec: Dummy provides: for symlinks, to allow upgrade with older packages that require <libname>.so.0. * Makefile.am: Switch to versionless shared libraries. Install all shared libraries just as <libname>.so. make install manually removes *.so.0.0 files that were left over from previous versions, and installs a temporary *.so.0 symlink to *.so, for temporary binary ABI compatibility with 0.60. The symlinks will be removed in 0.62. * Cleanup: always compile md5, sha* and hmac stuff, and remove all conditionally-compiled cruft. Move SASL list to an internal header. Add client-side support for AUTH EXTERNAL. * authsasl.c (auth_sasl_ex): auth_sasl_ex() supercedes auth_sasl(), invokes auth_sasl() for non-EXTERNAL SASL methods, implements EXTERNAL by going through the motions, then setting up a dummy authentication request. * authdaemon.c (auth_generic): Check for the dummy EXTERNAL authentication request, and handle it by invoking auth_getuserinfo(), rather than sending it down the pipe. This avoid having to implement a stub in every authentication module. * authmysqllib.c: Use mysql_set_character_set() instead of SET NAMES * authmysqllib.c: Fix domain-less queries. * Makefile: Drop the unmaintained authvchkpw module. * authmysqllib.c: Cleanup. Use mysql_real_escape_string instead of crude filtering. * Makefile.am: Use _LIBADD properly. * configure.in: More portability fixes.
2008-04-10Remove unnecessary PLIST_SUBST definition -- the PLIST is dynamic throughjlam1-2/+1
the use of AUTHLIB_PLIST, so we don't need to comment stuff out.
2008-02-18Make this more cut-and-paste-friendly.jlam1-4/+4
2008-02-18Actually add that prestart function as a start_precmd. Ride previousjlam1-1/+2
PKGREVISION bump.
2008-02-18+ Add full DESTDIR support.jlam3-27/+46
+ Create any required directories with the right ownership and permissions as a "prestart" action in the authdaemond rc.d script. Bump the PKGREVISION to 1.
2007-11-27Document where this file is included.jlam1-1/+6
2007-10-31Comment out LICENSE=gnu-gpl-v3 for now as part of transition to switchingjlam1-2/+2
pkgsrc to using license.mk. This will eventually be turned back on.
2007-10-15Update security/courier-authlib to 0.60.1. Changes from version 0.59.3jlam5-41/+34
include: * MYSQL_CHARACTER_SET option. * Allow underscores, colons and plusses, in account names. * Add {MD5RAW} hash method. * Fix runtime problems with hardcoded file descriptors in the daemon code by using OPEN_MAX instead.
2007-09-05Move variable declarations to start of block to appease older C compilers.jlam2-1/+24
2007-08-30Skip the interpreter check on authsystem.passwd as we don't want tojlam1-1/+2
depend on the tcl-expect package. The package MESSAGE file already tells the user what to do.
2007-08-10Update security/courier-authlib to 0.59.3. Changes from version 0.58jlam5-50/+68
include: * authpipe.c (auth_pipe_pre): Fix leak when authpipe module is enabled, but the actual authpipe script/external prog is not installed. * authmysqlrc: Implement SSL-encrypted MySQL connections * authldaplib.c (l_simple_bind_s): Fix anon binds. * authldaplib.c (auth_ldap_enumerate): Fix LDAP account enumeration * userdb/makeuserdb.in: Added the -f option to makeuserdb * authldaplib.c: Try to recover when the LDAP server closes the persistent socket, for inactivity.
2007-07-04Make it easier to build and install packages "unprivileged", wherejlam1-1/+4
the owner of all installed files is a non-root user. This change affects most packages that require special users or groups by making them use the specified unprivileged user and group instead. (1) Add two new variables PKG_GROUPS_VARS and PKG_USERS_VARS to unprivileged.mk. These two variables are lists of other bmake variables that define package-specific users and groups. Packages that have user-settable variables for users and groups, e.g. apache and APACHE_{USER,GROUP}, courier-mta and COURIER_{USER,GROUP}, etc., should list these variables in PKG_USERS_VARS and PKG_GROUPS_VARS so that unprivileged.mk can know to set them to ${UNPRIVILEGED_USER} and ${UNPRIVILEGED_GROUP}. (2) Modify packages to use PKG_GROUPS_VARS and PKG_USERS_VARS.
2006-07-08Change the format of BUILDLINK_ORDER to contain depth information as well,jlam1-2/+2
and add a new helper target and script, "show-buildlink3", that outputs a listing of the buildlink3.mk files included as well as the depth at which they are included. For example, "make show-buildlink3" in fonts/Xft2 displays: zlib fontconfig iconv zlib freetype2 expat freetype2 Xrender renderproto
2006-07-08Track information in a new variable BUILDLINK_ORDER that informs usjlam1-1/+2
of the order in which buildlink3.mk files are (recursively) included by a package Makefile.
2006-07-02This package needs expect(1). Bumped PKGREVISION.rillig1-2/+3
2006-05-31The databases/openldap package has been split in -client and -server componentghen1-2/+2
packages. Convert LDAP-based applications to depend on openldap-client, and bump PKGREVISION for those that depend on it by default.
2006-05-09Uses C++.joerg1-1/+2
2006-04-28Substitute for COURIER_{USER,GROUP} in a few more locations.jlam1-1/+3
2006-04-23Modify packages that set PKG_USERS and PKG_GROUPS to follow the newjlam1-2/+2
syntax as specified in pkgsrc/mk/install/bsd.pkginstall.mk:1.47.
2006-04-13BROKEN_GETTEXT_DETECTION already defaults to "no".jlam1-2/+1
2006-04-12Aligned the last line of the buildlink3.mk files with the first line, sorillig1-2/+2
that they look nicer.
2006-04-06Over 1200 files touched but no revisions bumped :)reed1-3/+3
RECOMMENDED is removed. It becomes ABI_DEPENDS. BUILDLINK_RECOMMENDED.foo becomes BUILDLINK_ABI_DEPENDS.foo. BUILDLINK_DEPENDS.foo becomes BUILDLINK_API_DEPENDS.foo. BUILDLINK_DEPENDS does not change. IGNORE_RECOMMENDED (which defaulted to "no") becomes USE_ABI_DEPENDS which defaults to "yes". Added to obsolete.mk checking for IGNORE_RECOMMENDED. I did not manually go through and fix any aesthetic tab/spacing issues. I have tested the above patch on DragonFly building and packaging subversion and pkglint and their many dependencies. I have also tested USE_ABI_DEPENDS=no on my NetBSD workstation (where I have used IGNORE_RECOMMENDED for a long time). I have been an active user of IGNORE_RECOMMENDED since it was available. As suggested, I removed the documentation sentences suggesting bumping for "security" issues. As discussed on tech-pkg. I will commit to revbump, pkglint, pkg_install, createbuildlink separately. Note that if you use wip, it will fail! I will commit to pkgsrc-wip later (within day).
2006-03-14Modify the pkginstall framework so that it manages all aspects ofjlam1-3/+1
INSTALL/DEINSTALL script creation within pkgsrc. If an INSTALL or DEINSTALL script is found in the package directory, it is automatically used as a template for the pkginstall-generated scripts. If instead, they should be used simply as the full scripts, then the package Makefile should set INSTALL_SRC or DEINSTALL_SRC explicitly, e.g.: INSTALL_SRC= ${PKGDIR}/INSTALL DEINSTALL_SRC= # emtpy As part of the restructuring of the pkginstall framework internals, we now *always* generate temporary INSTALL or DEINSTALL scripts. By comparing these temporary scripts with minimal INSTALL/DEINSTALL scripts formed from only the base templates, we determine whether or not the INSTALL/DEINSTALL scripts are actually needed by the package (see the generate-install-scripts target in bsd.pkginstall.mk). In addition, more variables in the framework have been made private. The *_EXTRA_TMPL variables have been renamed to *_TEMPLATE, which are more sensible names given the very few exported variables in this framework. The only public variables relating to the templates are: INSTALL_SRC INSTALL_TEMPLATE DEINSTALL_SRC DEINSTALL_TEMPLATE HEADER_TEMPLATE The packages in pkgsrc have been modified to reflect the changes in the pkginstall framework.
2006-02-05Recursive revision bump / recommended bump for gettext ABI change.joerg2-3/+4
generated by cgit v1.2.3 (git 2.39.1) at 2024-08-10 04:40:16 +0000