summaryrefslogtreecommitdiff
path: root/security/courier-authlib
AgeCommit message (Collapse)AuthorFilesLines
2016-02-26Use OPSYSVARS.jperkin1-5/+3
2015-11-04Add SHA512 digests for distfiles for security categoryagc1-1/+2
Problems found locating distfiles: Package f-prot-antivirus6-fs-bin: missing distfile fp-NetBSD.x86.32-fs-6.2.3.tar.gz Package f-prot-antivirus6-ws-bin: missing distfile fp-NetBSD.x86.32-ws-6.2.3.tar.gz Package libidea: missing distfile libidea-0.8.2b.tar.gz Package openssh: missing distfile openssh-7.1p1-hpn-20150822.diff.bz2 Package uvscan: missing distfile vlp4510e.tar.Z Otherwise, existing SHA1 digests verified and found to be the same on the machine holding the existing distfiles (morden). All existing SHA1 digests retained for now as an audit trail.
2015-06-12Recursive PKGREVISION bump for all packages mentioning 'perl',wiz1-2/+2
having a PKGNAME of p5-*, or depending such a package, for perl-5.22.0.
2014-06-14fix SMF Manifest installation by not overwriting INSTALLATION_DIRSwiedi1-2/+2
2014-05-29Bump for perl-5.20.0.wiz1-2/+2
Do it for all packages that * mention perl, or * have a directory name starting with p5-*, or * depend on a package starting with p5- like last time, for 5.18, where this didn't lead to complaints. Let me know if you have any this time.
2014-05-06Buildlink libiconv using build dependency method for OpenBSD. The courier-rodent1-1/+6
{authlib,maildir} packages won't build otherwise (at least with PREFER_PKGSRC=yes).
2014-03-26Fix SMF manifests that were not populated properly.fhajny1-21/+21
2014-03-11Import initial SMF support for individual packages.jperkin1-0/+37
2014-03-11Remove example rc.d scripts from PLISTs.jperkin1-2/+1
These are now handled dynamically if INIT_SYSTEM is set to "rc.d", or ignored otherwise.
2014-02-12Recursive PKGREVISION bump for OpenSSL API version bump.tron1-2/+2
2013-05-31Bump all packages for perl-5.18, thatwiz1-2/+2
a) refer 'perl' in their Makefile, or b) have a directory name of p5-*, or c) have any dependency on any p5-* package Like last time, where this caused no complaints.
2013-03-02Bump PKGREVISION for mysql default change to 55.wiz1-2/+2
2013-02-06PKGREVISION bumps for the security/openssl 1.0.1d update.jperkin1-2/+2
2012-12-16recursive bump from cyrus-sasl libsasl2 shlib major bump.obache1-2/+2
2012-10-23Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days.asau1-3/+1
2012-10-03Bump all packages that use perl, or depend on a p5-* package, orwiz1-1/+2
are called p5-*. I hope that's all of them.
2012-06-09Changes 0.64.0:adam5-32/+33
* authpam.c (callback_pam): Call pam_end() after an authentication attempt. * Makefile.am: Renamed authstaticlist.h to courierauthstaticlist.h, and added it to the list of header files that 'make install' puts into includedir. * Fix gcc 4.6 warnings * courier.spec.in: switch to systemd. * Fix autoconf warnings. * courier-authlib.spec: Make rmplint happy.
2012-05-13"Convert" to destdir by moving one line higher up.wiz1-3/+3
2012-03-09Force --with-waitfunc=wait3 on SunOS, fixes several courier-* packages.fhajny1-1/+7
2010-11-10pkglint fixesadam3-15/+12
2010-06-15courier-authlib-0.63.0:pettai5-30/+29
* authldapescape.c: Factor out LDAP string escape function. * authldap.schema: Various fixes * authldap.ldif (olcObjectClasses): Create LDIF format schema from authldap.schema * authoption.c (auth_getoptionenvint): For account options that are parsed to an int, an option value that begins with t, T, y, or Y is evaluated as 1, other alphabetic values as 0; so that 'true' or 'yes' get evaluated as 1. (See the Changelog for the previous releases) Based on patch(es) from PR pkg/42989 by Brian Candler
2010-03-21Reset maintainer, developer lost his commit bit.wiz1-2/+2
2009-12-15Recursive bump for libltdljoerg1-1/+2
2009-07-02Update courier-authlib to 0.62.2.obache5-18/+19
Include security fix for CVE-2008-2380 and requested by PR#41023 (approved by wiz@). 0.62.2 This release corrects a makefile compatibility problem with bash 4. 0.62.1 This release correct a couple of minor compiler warnings and errors. * cryptpassword.c: Fix compiler warnings * checkpasswordsha1.c: Fix compiler warnings. * authldaplib.c (auth_ldap_enumerate): Fix typo. 0.62.0 This release adds support for additional hash functions, and an update to the Postgres driver that removes potentional SQL injection vulnerabilities in some circumstances. * authpgsqllib.c: Use PQescapeStringConn() instead of removing all apostrophes from query parameters. This fixes a potential SQL injection vulnerability if the Postgres database uses a non-Latin locale. * Added support for {SSHA}-encrypted passwords. Based on a patch by Zou bin <zb@bisp.com>. * Added support for {SHA512} hash function
2009-06-27Add ${TRUE} to end of the GENERATE_PLIST to avoid picked up exit code of lastobache1-1/+2
test command.
2009-06-14Remove @dirrm related logic.joerg1-7/+1
2009-05-19Use standard location for LICENSE line (in MAINTAINER/HOMEPAGE/COMMENTwiz1-3/+2
block). Uncomment some commented out LICENSE lines while here.
2009-03-20Simply and speed up buildlink3.mk files and processing.joerg1-13/+6
This changes the buildlink3.mk files to use an include guard for the recursive include. The use of BUILDLINK_DEPTH, BUILDLINK_DEPENDS, BUILDLINK_PACKAGES and BUILDLINK_ORDER is handled by a single new variable BUILDLINK_TREE. Each buildlink3.mk file adds a pair of enter/exit marker, which can be used to reconstruct the tree and to determine first level includes. Avoiding := for large variables (BUILDLINK_ORDER) speeds up parse time as += has linear complexity. The include guard reduces system time by avoiding reading files over and over again. For complex packages this reduces both %user and %sys time to half of the former time.
2008-10-01Revert to previous revision and remove bin/makedat (it was conflict with ↵obache1-17/+1
maildrop?). Additional entries are optionally and already handled in Makefile and options.mk. Re: PR 39661
2008-09-28Upgrade courier-authlib to version 0.61.0 in order to fix CVE-2008-2667,tonnerre5-61/+95
finally. While here, fix PLIST and depkglint a bit. Also, fix the horrid abuse of libtool. Changes since 0.60.2: * courier-authlib.spec: Dummy provides: for symlinks, to allow upgrade with older packages that require <libname>.so.0. * Makefile.am: Switch to versionless shared libraries. Install all shared libraries just as <libname>.so. make install manually removes *.so.0.0 files that were left over from previous versions, and installs a temporary *.so.0 symlink to *.so, for temporary binary ABI compatibility with 0.60. The symlinks will be removed in 0.62. * Cleanup: always compile md5, sha* and hmac stuff, and remove all conditionally-compiled cruft. Move SASL list to an internal header. Add client-side support for AUTH EXTERNAL. * authsasl.c (auth_sasl_ex): auth_sasl_ex() supercedes auth_sasl(), invokes auth_sasl() for non-EXTERNAL SASL methods, implements EXTERNAL by going through the motions, then setting up a dummy authentication request. * authdaemon.c (auth_generic): Check for the dummy EXTERNAL authentication request, and handle it by invoking auth_getuserinfo(), rather than sending it down the pipe. This avoid having to implement a stub in every authentication module. * authmysqllib.c: Use mysql_set_character_set() instead of SET NAMES * authmysqllib.c: Fix domain-less queries. * Makefile: Drop the unmaintained authvchkpw module. * authmysqllib.c: Cleanup. Use mysql_real_escape_string instead of crude filtering. * Makefile.am: Use _LIBADD properly. * configure.in: More portability fixes.
2008-04-10Remove unnecessary PLIST_SUBST definition -- the PLIST is dynamic throughjlam1-2/+1
the use of AUTHLIB_PLIST, so we don't need to comment stuff out.
2008-02-18Make this more cut-and-paste-friendly.jlam1-4/+4
2008-02-18Actually add that prestart function as a start_precmd. Ride previousjlam1-1/+2
PKGREVISION bump.
2008-02-18+ Add full DESTDIR support.jlam3-27/+46
+ Create any required directories with the right ownership and permissions as a "prestart" action in the authdaemond rc.d script. Bump the PKGREVISION to 1.
2007-11-27Document where this file is included.jlam1-1/+6
2007-10-31Comment out LICENSE=gnu-gpl-v3 for now as part of transition to switchingjlam1-2/+2
pkgsrc to using license.mk. This will eventually be turned back on.
2007-10-15Update security/courier-authlib to 0.60.1. Changes from version 0.59.3jlam5-41/+34
include: * MYSQL_CHARACTER_SET option. * Allow underscores, colons and plusses, in account names. * Add {MD5RAW} hash method. * Fix runtime problems with hardcoded file descriptors in the daemon code by using OPEN_MAX instead.
2007-09-05Move variable declarations to start of block to appease older C compilers.jlam2-1/+24
2007-08-30Skip the interpreter check on authsystem.passwd as we don't want tojlam1-1/+2
depend on the tcl-expect package. The package MESSAGE file already tells the user what to do.
2007-08-10Update security/courier-authlib to 0.59.3. Changes from version 0.58jlam5-50/+68
include: * authpipe.c (auth_pipe_pre): Fix leak when authpipe module is enabled, but the actual authpipe script/external prog is not installed. * authmysqlrc: Implement SSL-encrypted MySQL connections * authldaplib.c (l_simple_bind_s): Fix anon binds. * authldaplib.c (auth_ldap_enumerate): Fix LDAP account enumeration * userdb/makeuserdb.in: Added the -f option to makeuserdb * authldaplib.c: Try to recover when the LDAP server closes the persistent socket, for inactivity.
2007-07-04Make it easier to build and install packages "unprivileged", wherejlam1-1/+4
the owner of all installed files is a non-root user. This change affects most packages that require special users or groups by making them use the specified unprivileged user and group instead. (1) Add two new variables PKG_GROUPS_VARS and PKG_USERS_VARS to unprivileged.mk. These two variables are lists of other bmake variables that define package-specific users and groups. Packages that have user-settable variables for users and groups, e.g. apache and APACHE_{USER,GROUP}, courier-mta and COURIER_{USER,GROUP}, etc., should list these variables in PKG_USERS_VARS and PKG_GROUPS_VARS so that unprivileged.mk can know to set them to ${UNPRIVILEGED_USER} and ${UNPRIVILEGED_GROUP}. (2) Modify packages to use PKG_GROUPS_VARS and PKG_USERS_VARS.
2006-07-08Change the format of BUILDLINK_ORDER to contain depth information as well,jlam1-2/+2
and add a new helper target and script, "show-buildlink3", that outputs a listing of the buildlink3.mk files included as well as the depth at which they are included. For example, "make show-buildlink3" in fonts/Xft2 displays: zlib fontconfig iconv zlib freetype2 expat freetype2 Xrender renderproto
2006-07-08Track information in a new variable BUILDLINK_ORDER that informs usjlam1-1/+2
of the order in which buildlink3.mk files are (recursively) included by a package Makefile.
2006-07-02This package needs expect(1). Bumped PKGREVISION.rillig1-2/+3
2006-05-31The databases/openldap package has been split in -client and -server componentghen1-2/+2
packages. Convert LDAP-based applications to depend on openldap-client, and bump PKGREVISION for those that depend on it by default.
2006-05-09Uses C++.joerg1-1/+2
2006-04-28Substitute for COURIER_{USER,GROUP} in a few more locations.jlam1-1/+3
2006-04-23Modify packages that set PKG_USERS and PKG_GROUPS to follow the newjlam1-2/+2
syntax as specified in pkgsrc/mk/install/bsd.pkginstall.mk:1.47.
2006-04-13BROKEN_GETTEXT_DETECTION already defaults to "no".jlam1-2/+1
2006-04-12Aligned the last line of the buildlink3.mk files with the first line, sorillig1-2/+2
that they look nicer.