diff options
23 files changed, 30 insertions, 27 deletions
diff --git a/Add-PKINIT-UPN-tests-to-t_pkinit.py.patch b/Add-PKINIT-UPN-tests-to-t_pkinit.py.patch index 9a6265f..71f3cd3 100644 --- a/Add-PKINIT-UPN-tests-to-t_pkinit.py.patch +++ b/Add-PKINIT-UPN-tests-to-t_pkinit.py.patch @@ -1,4 +1,4 @@ -From 650504957919949aa8ede95fc5e251cdd96e9895 Mon Sep 17 00:00:00 2001 +From e03e4c839a67da9b6f4135999de653d22118d8a3 Mon Sep 17 00:00:00 2001 From: Matt Rogers <mrogers@redhat.com> Date: Fri, 9 Dec 2016 11:43:27 -0500 Subject: [PATCH] Add PKINIT UPN tests to t_pkinit.py diff --git a/Add-certauth-pluggable-interface.patch b/Add-certauth-pluggable-interface.patch index 49450d1..46fb84c 100644 --- a/Add-certauth-pluggable-interface.patch +++ b/Add-certauth-pluggable-interface.patch @@ -1,4 +1,4 @@ -From bb76ee06b88ebfc1a2abc95fc096299bda8946e9 Mon Sep 17 00:00:00 2001 +From f113cd5a3d043493c8d4c53dd346b290a0959de9 Mon Sep 17 00:00:00 2001 From: Matt Rogers <mrogers@redhat.com> Date: Tue, 28 Feb 2017 15:55:24 -0500 Subject: [PATCH] Add certauth pluggable interface diff --git a/Add-k5test-expected_msg-expected_trace.patch b/Add-k5test-expected_msg-expected_trace.patch index 628de03..4b90b03 100644 --- a/Add-k5test-expected_msg-expected_trace.patch +++ b/Add-k5test-expected_msg-expected_trace.patch @@ -1,4 +1,4 @@ -From 771cbaa6c4cc441f46985d67381de69c77349ed7 Mon Sep 17 00:00:00 2001 +From 166c5212d1954c6ac8d445485c47cc88b3802907 Mon Sep 17 00:00:00 2001 From: Greg Hudson <ghudson@mit.edu> Date: Tue, 17 Jan 2017 11:24:41 -0500 Subject: [PATCH] Add k5test expected_msg, expected_trace diff --git a/Add-test-cert-generation-to-make-certs.sh.patch b/Add-test-cert-generation-to-make-certs.sh.patch index 8c5ed10..8826b31 100644 --- a/Add-test-cert-generation-to-make-certs.sh.patch +++ b/Add-test-cert-generation-to-make-certs.sh.patch @@ -1,4 +1,4 @@ -From ee266c55e8f4864dfca4415aaf53ae63587378b7 Mon Sep 17 00:00:00 2001 +From 44dc9a14f03408f96a38a38aa7b0547e63501bfa Mon Sep 17 00:00:00 2001 From: Matt Rogers <mrogers@redhat.com> Date: Mon, 5 Dec 2016 12:22:45 -0500 Subject: [PATCH] Add test cert generation to make-certs.sh diff --git a/Add-the-client_name-kdcpreauth-callback.patch b/Add-the-client_name-kdcpreauth-callback.patch index 6a5eb8a..2160db6 100644 --- a/Add-the-client_name-kdcpreauth-callback.patch +++ b/Add-the-client_name-kdcpreauth-callback.patch @@ -1,4 +1,4 @@ -From efc27c7800ac9863493b4d3b763fefcaac4e3801 Mon Sep 17 00:00:00 2001 +From b7195f09475da34a227db8dae813a54b0353d447 Mon Sep 17 00:00:00 2001 From: Matt Rogers <mrogers@redhat.com> Date: Tue, 4 Apr 2017 16:54:56 -0400 Subject: [PATCH] Add the client_name() kdcpreauth callback diff --git a/Build-with-Werror-implicit-int-where-supported.patch b/Build-with-Werror-implicit-int-where-supported.patch index 0417d26..800967f 100644 --- a/Build-with-Werror-implicit-int-where-supported.patch +++ b/Build-with-Werror-implicit-int-where-supported.patch @@ -1,4 +1,4 @@ -From 8bab441cd8ac47721541aacf88349a9c027564b7 Mon Sep 17 00:00:00 2001 +From b87501b9051a1befbd84165295b8ed775adafd62 Mon Sep 17 00:00:00 2001 From: Robbie Harwood <rharwood@redhat.com> Date: Thu, 10 Nov 2016 13:20:49 -0500 Subject: [PATCH] Build with -Werror-implicit-int where supported diff --git a/Correct-error-handling-bug-in-prior-commit.patch b/Correct-error-handling-bug-in-prior-commit.patch index 95b41e5..5f2c179 100644 --- a/Correct-error-handling-bug-in-prior-commit.patch +++ b/Correct-error-handling-bug-in-prior-commit.patch @@ -1,4 +1,4 @@ -From edb91a5cafe2380209e5d482062dfdd608b23772 Mon Sep 17 00:00:00 2001 +From ec5bfaec762cff5eea4cac43a5be59992616fc27 Mon Sep 17 00:00:00 2001 From: Greg Hudson <ghudson@mit.edu> Date: Thu, 23 Mar 2017 13:42:55 -0400 Subject: [PATCH] Correct error handling bug in prior commit diff --git a/Deindent-crypto_retrieve_X509_sans.patch b/Deindent-crypto_retrieve_X509_sans.patch index 6254d73..b3bcd3f 100644 --- a/Deindent-crypto_retrieve_X509_sans.patch +++ b/Deindent-crypto_retrieve_X509_sans.patch @@ -1,4 +1,4 @@ -From 23086ac768a32db1e40a9b63684dbcfd76aba033 Mon Sep 17 00:00:00 2001 +From f6fbff49c51b8126818c9036d207911c3e23b9de Mon Sep 17 00:00:00 2001 From: Greg Hudson <ghudson@mit.edu> Date: Wed, 4 Jan 2017 11:33:57 -0500 Subject: [PATCH] Deindent crypto_retrieve_X509_sans() diff --git a/Improve-PKINIT-UPN-SAN-matching.patch b/Improve-PKINIT-UPN-SAN-matching.patch index b6170c1..6ad01ee 100644 --- a/Improve-PKINIT-UPN-SAN-matching.patch +++ b/Improve-PKINIT-UPN-SAN-matching.patch @@ -1,4 +1,4 @@ -From a489d1309112af9fd6f5ecf3e6e93ec87c06e319 Mon Sep 17 00:00:00 2001 +From c0472687218a6e2bfd7b55e7aa85633d9f8e2673 Mon Sep 17 00:00:00 2001 From: Matt Rogers <mrogers@redhat.com> Date: Mon, 5 Dec 2016 12:17:59 -0500 Subject: [PATCH] Improve PKINIT UPN SAN matching diff --git a/Use-GSSAPI-fallback-skiptest.patch b/Use-GSSAPI-fallback-skiptest.patch index dfaad06..31e2381 100644 --- a/Use-GSSAPI-fallback-skiptest.patch +++ b/Use-GSSAPI-fallback-skiptest.patch @@ -1,4 +1,4 @@ -From 99df255485ea60bd32e8fffc012348d1046693b2 Mon Sep 17 00:00:00 2001 +From 659b4dd127cdd001e34ea4faf30885f7b1bc4945 Mon Sep 17 00:00:00 2001 From: Robbie Harwood <rharwood@redhat.com> Date: Wed, 1 Mar 2017 17:46:22 -0500 Subject: [PATCH] Use GSSAPI fallback skiptest diff --git a/Use-fallback-realm-for-GSSAPI-ccache-selection.patch b/Use-fallback-realm-for-GSSAPI-ccache-selection.patch index 9d545a9..b08e489 100644 --- a/Use-fallback-realm-for-GSSAPI-ccache-selection.patch +++ b/Use-fallback-realm-for-GSSAPI-ccache-selection.patch @@ -1,4 +1,4 @@ -From 1f1dc3a88a5581e55d010eda16d8ef896009b2d0 Mon Sep 17 00:00:00 2001 +From 215931cd91a160516c5fb8a5fbc8568534c49ff0 Mon Sep 17 00:00:00 2001 From: Matt Rogers <mrogers@redhat.com> Date: Fri, 10 Feb 2017 12:53:42 -0500 Subject: [PATCH] Use fallback realm for GSSAPI ccache selection diff --git a/Use-the-canonical-client-principal-name-for-OTP.patch b/Use-the-canonical-client-principal-name-for-OTP.patch index 4dc794d..a2aef56 100644 --- a/Use-the-canonical-client-principal-name-for-OTP.patch +++ b/Use-the-canonical-client-principal-name-for-OTP.patch @@ -1,4 +1,4 @@ -From d697b2c12eb9a35732fed48d06c374a13f27f4e1 Mon Sep 17 00:00:00 2001 +From c55b08e88c43486769dbf63a245e4097db71e0d3 Mon Sep 17 00:00:00 2001 From: Matt Rogers <mrogers@redhat.com> Date: Wed, 5 Apr 2017 16:48:55 -0400 Subject: [PATCH] Use the canonical client principal name for OTP diff --git a/krb5-1.11-kpasswdtest.patch b/krb5-1.11-kpasswdtest.patch index b18d772..19fd77b 100644 --- a/krb5-1.11-kpasswdtest.patch +++ b/krb5-1.11-kpasswdtest.patch @@ -1,4 +1,4 @@ -From ab786ce6f599e3e2185b689dae73ea0922d7d744 Mon Sep 17 00:00:00 2001 +From b932cd580f6c78bcec06620770444b480cb7899c Mon Sep 17 00:00:00 2001 From: Robbie Harwood <rharwood@redhat.com> Date: Tue, 23 Aug 2016 16:52:01 -0400 Subject: [PATCH] krb5-1.11-kpasswdtest.patch diff --git a/krb5-1.11-run_user_0.patch b/krb5-1.11-run_user_0.patch index 3ec120d..c886713 100644 --- a/krb5-1.11-run_user_0.patch +++ b/krb5-1.11-run_user_0.patch @@ -1,4 +1,4 @@ -From 7148ab604465801f1d73ebabf58f906073be0b10 Mon Sep 17 00:00:00 2001 +From 85c019fe805d801ad3b65cad61fd9b2f1eef8d7f Mon Sep 17 00:00:00 2001 From: Robbie Harwood <rharwood@redhat.com> Date: Tue, 23 Aug 2016 16:49:57 -0400 Subject: [PATCH] krb5-1.11-run_user_0.patch diff --git a/krb5-1.12-api.patch b/krb5-1.12-api.patch index dfd04be..22575e8 100644 --- a/krb5-1.12-api.patch +++ b/krb5-1.12-api.patch @@ -1,4 +1,4 @@ -From 8ab8fd6039155f41218b2fe1eb39269b7910ff8f Mon Sep 17 00:00:00 2001 +From 3bd2daf49b882deeaadd846d138c06d72de589fe Mon Sep 17 00:00:00 2001 From: Robbie Harwood <rharwood@redhat.com> Date: Tue, 23 Aug 2016 16:47:00 -0400 Subject: [PATCH] krb5-1.12-api.patch diff --git a/krb5-1.12-ksu-path.patch b/krb5-1.12-ksu-path.patch index 7845270..53b057b 100644 --- a/krb5-1.12-ksu-path.patch +++ b/krb5-1.12-ksu-path.patch @@ -1,4 +1,4 @@ -From d5f00c7819b307be9ed2ca4bf2ac9b273fc04c84 Mon Sep 17 00:00:00 2001 +From b3b35bbf939f05b9caece64f93c012c2f241f1c7 Mon Sep 17 00:00:00 2001 From: Robbie Harwood <rharwood@redhat.com> Date: Tue, 23 Aug 2016 16:32:09 -0400 Subject: [PATCH] krb5-1.12-ksu-path.patch diff --git a/krb5-1.12-ktany.patch b/krb5-1.12-ktany.patch index 4690239..fc63d7c 100644 --- a/krb5-1.12-ktany.patch +++ b/krb5-1.12-ktany.patch @@ -1,4 +1,4 @@ -From ea0aedf9770b3f8c6b640aaff8ddcbd5be3842d6 Mon Sep 17 00:00:00 2001 +From 259f691fac41a06c238aea1d812b0f3889f06877 Mon Sep 17 00:00:00 2001 From: Robbie Harwood <rharwood@redhat.com> Date: Tue, 23 Aug 2016 16:33:53 -0400 Subject: [PATCH] krb5-1.12-ktany.patch diff --git a/krb5-1.13-dirsrv-accountlock.patch b/krb5-1.13-dirsrv-accountlock.patch index 934ca4d..eb384f0 100644 --- a/krb5-1.13-dirsrv-accountlock.patch +++ b/krb5-1.13-dirsrv-accountlock.patch @@ -1,4 +1,4 @@ -From 7f75d00da9e4d6e9af1663f5b208e000f4ed5c62 Mon Sep 17 00:00:00 2001 +From d183995c587fc0f32a76011858703308d751e17c Mon Sep 17 00:00:00 2001 From: Robbie Harwood <rharwood@redhat.com> Date: Tue, 23 Aug 2016 16:47:44 -0400 Subject: [PATCH] krb5-1.13-dirsrv-accountlock.patch diff --git a/krb5-1.15-beta1-buildconf.patch b/krb5-1.15-beta1-buildconf.patch index 63e2dcb..ca6723d 100644 --- a/krb5-1.15-beta1-buildconf.patch +++ b/krb5-1.15-beta1-buildconf.patch @@ -1,4 +1,4 @@ -From 715dbc4d99494d028951058c3c21a1948f7697d1 Mon Sep 17 00:00:00 2001 +From 35e09ba633eb14cc207b59de7ce60324ea86554f Mon Sep 17 00:00:00 2001 From: Robbie Harwood <rharwood@redhat.com> Date: Tue, 23 Aug 2016 16:45:26 -0400 Subject: [PATCH] krb5-1.15-beta1-buildconf.patch diff --git a/krb5-1.15-beta1-selinux-label.patch b/krb5-1.15.1-selinux-label.patch index c3060a9..d0bf8f3 100644 --- a/krb5-1.15-beta1-selinux-label.patch +++ b/krb5-1.15.1-selinux-label.patch @@ -1,7 +1,7 @@ -From 6d95fa032279ef3a53348243c9d0d4b9233761db Mon Sep 17 00:00:00 2001 +From a3280e7ec607b9eb7b79cf75cd323fbbdd125b02 Mon Sep 17 00:00:00 2001 From: Robbie Harwood <rharwood@redhat.com> Date: Tue, 23 Aug 2016 16:30:53 -0400 -Subject: [PATCH] krb5-1.15-beta1-selinux-label.patch +Subject: [PATCH] krb5-1.15.1-selinux-label.patch SELinux bases access to files on the domain of the requesting process, the operation being performed, and the context applied to the file. @@ -653,7 +653,7 @@ index 6239e4176..17bcd2a67 100644 diff --git a/src/util/support/selinux.c b/src/util/support/selinux.c new file mode 100644 -index 000000000..230263421 +index 000000000..6d41f3244 --- /dev/null +++ b/src/util/support/selinux.c @@ -0,0 +1,406 @@ @@ -720,7 +720,7 @@ index 000000000..230263421 +{ +#ifdef DEBUG + va_list ap; -+ va_start(ap, str); ++ va_start(ap, fmt); + if (isatty(fileno(stderr))) { + vfprintf(stderr, fmt, ap); + } diff --git a/krb5-1.3.1-dns.patch b/krb5-1.3.1-dns.patch index 20adf1a..c3a1d07 100644 --- a/krb5-1.3.1-dns.patch +++ b/krb5-1.3.1-dns.patch @@ -1,4 +1,4 @@ -From f4ef24189140081b5f92132fe6b552029a1d7661 Mon Sep 17 00:00:00 2001 +From 2ecbf6ba30520f908188521eb903876bc64905ae Mon Sep 17 00:00:00 2001 From: Robbie Harwood <rharwood@redhat.com> Date: Tue, 23 Aug 2016 16:46:21 -0400 Subject: [PATCH] krb5-1.3.1-dns.patch diff --git a/krb5-1.9-debuginfo.patch b/krb5-1.9-debuginfo.patch index 48dfcfc..2d70bd5 100644 --- a/krb5-1.9-debuginfo.patch +++ b/krb5-1.9-debuginfo.patch @@ -1,4 +1,4 @@ -From 460d36cea95033381a1f50dd387ce21447e7fb85 Mon Sep 17 00:00:00 2001 +From 06349d595ba0baa72a9d5aabeedee5926419d6bc Mon Sep 17 00:00:00 2001 From: Robbie Harwood <rharwood@redhat.com> Date: Tue, 23 Aug 2016 16:49:25 -0400 Subject: [PATCH] krb5-1.9-debuginfo.patch @@ -18,7 +18,7 @@ Summary: The Kerberos network authentication system Name: krb5 Version: 1.15.1 # for prerelease, should be e.g., 0.3.beta2%{?dist} -Release: 9%{?dist} +Release: 10%{?dist} # - Maybe we should explode from the now-available-to-everybody tarball instead? # http://web.mit.edu/kerberos/dist/krb5/1.13/krb5-1.13.2-signed.tar # - The sources below are stored in a lookaside cache. Upload with @@ -52,7 +52,7 @@ Source39: krb5-krb5kdc.conf Source100: noport.c Patch1: krb5-1.12.1-pam.patch -Patch2: krb5-1.15-beta1-selinux-label.patch +Patch2: krb5-1.15.1-selinux-label.patch Patch3: krb5-1.12-ksu-path.patch Patch4: krb5-1.12-ktany.patch Patch5: krb5-1.15-beta1-buildconf.patch @@ -731,6 +731,9 @@ exit 0 %{_libdir}/libkadm5srv_mit.so.* %changelog +* Wed Jun 07 2017 Robbie Harwood <rharwood@redhat.com> - 1.15.1-10 +- Fix custom build with -DDEBUG + * Wed May 24 2017 Robbie Harwood <rharwood@redhat.com> - 1.15.1-9 - Use standard trigger logic for krb5 snippet |