Merge pull request #1927 from mjg59/sssd

Sssd
This commit is contained in:
Matthew Garrett 2016-05-02 14:27:46 -07:00
commit 5baa1b49ae
10 changed files with 933 additions and 1 deletions

View File

@ -9,7 +9,7 @@ CROS_WORKON_REPO="git://github.com"
if [[ "${PV}" == 9999 ]]; then if [[ "${PV}" == 9999 ]]; then
KEYWORDS="~amd64 ~arm ~arm64 ~x86" KEYWORDS="~amd64 ~arm ~arm64 ~x86"
else else
CROS_WORKON_COMMIT="139da2652de491ae70371413b45e189fe8e727f6" CROS_WORKON_COMMIT="32a47835ee59f56a816474cccc2197ed1ffacee9"
KEYWORDS="amd64 arm arm64 x86" KEYWORDS="amd64 arm arm64 x86"
fi fi
@ -159,6 +159,10 @@ src_install() {
# For compatibility with older SDKs which use 1000 for the core user. # For compatibility with older SDKs which use 1000 for the core user.
fowners -R 500:500 /home/core || die fowners -R 500:500 /home/core || die
if use arm64; then
sed -i "${D}"/etc/nsswitch.conf 's/ sss//' || die
fi
if use cros_host; then if use cros_host; then
# Provided by vim in the SDK # Provided by vim in the SDK
rm -r "${D}"/etc/vim || die rm -r "${D}"/etc/vim || die

View File

@ -0,0 +1,589 @@
# ChangeLog for sys-auth/pambase
# Copyright 1999-2014 Gentoo Foundation; Distributed under the GPL v2
# $Header: /var/cvsroot/gentoo-x86/sys-auth/pambase/ChangeLog,v 1.138 2014/03/13 14:31:20 ssuominen Exp $
13 Mar 2014; Samuli Suominen <ssuominen@gentoo.org>
-pambase-20120417-r1.ebuild, -pambase-20120417-r2.ebuild,
-pambase-20120417.ebuild:
old
*pambase-20140313 (13 Mar 2014)
13 Mar 2014; Samuli Suominen <ssuominen@gentoo.org> +pambase-20140313.ebuild:
Version bump (imported -systemd.patch, -systemd-auth.patch and -lastlog-
silent.patch)
18 Jan 2014; Mike Frysinger <vapier@gentoo.org> pambase-20120417-r3.ebuild:
Add arm64 love.
18 Jan 2014; Mike Frysinger <vapier@gentoo.org> pambase-20120417-r1.ebuild,
pambase-20120417-r3.ebuild, pambase-20120417.ebuild:
Mark m68k/s390/sh stable.
14 Jan 2014; Pacho Ramos <pacho@gentoo.org> pambase-20120417-r3.ebuild:
ia64 stable, bug #491034 (thanks to Emeric Maschino for testing)
23 Dec 2013; Agostino Sarubbo <ago@gentoo.org> pambase-20120417-r3.ebuild:
Stable for sparc, wrt bug #491034
23 Dec 2013; Agostino Sarubbo <ago@gentoo.org> pambase-20120417-r3.ebuild:
Stable for ppc, wrt bug #491034
22 Dec 2013; Agostino Sarubbo <ago@gentoo.org> pambase-20120417-r3.ebuild:
Stable for ppc64, wrt bug #491034
30 Nov 2013; Markus Meier <maekke@gentoo.org> pambase-20120417-r3.ebuild:
arm stable, bug #491034
17 Nov 2013; Matt Turner <mattst88@gentoo.org> pambase-20120417-r3.ebuild:
alpha stable, bug 491034.
16 Nov 2013; Pacho Ramos <pacho@gentoo.org> pambase-20120417-r3.ebuild:
amd64/x86 stable, bug #491034
12 Nov 2013; Jeroen Roovers <jer@gentoo.org> pambase-20120417-r3.ebuild:
Stable for HPPA (bug #491034).
*pambase-20120417-r3 (27 Oct 2013)
27 Oct 2013; Pacho Ramos <pacho@gentoo.org>
+files/pambase-20120417-systemd-auth.patch, +pambase-20120417-r3.ebuild:
Load pam_systemd from system-auth instead of system-login, bug #485470 by
Benjamin Franzke
05 Sep 2013; Mike Frysinger <vapier@gentoo.org> pambase-20120417-r2.ebuild:
Mark m68k/s390/sh stable #454388.
21 Aug 2013; Samuli Suominen <ssuominen@gentoo.org>
pambase-20120417-r2.ebuild:
Warn people from enabling weird setup with USE="consolekit systemd" and
having 2 session trackers running at the same time wrt #478258
03 Aug 2013; Agostino Sarubbo <ago@gentoo.org> pambase-20120417-r2.ebuild:
Stable for sparc, wrt bug #454388
07 Jul 2013; Agostino Sarubbo <ago@gentoo.org> pambase-20120417-r2.ebuild:
Stable for ia64, wrt bug #454388
07 Jul 2013; Agostino Sarubbo <ago@gentoo.org> pambase-20120417-r2.ebuild:
Stable for arm, wrt bug #454388
06 Jul 2013; Agostino Sarubbo <ago@gentoo.org> pambase-20120417-r2.ebuild:
Stable for alpha, wrt bug #454388
04 Jul 2013; Agostino Sarubbo <ago@gentoo.org> pambase-20120417-r2.ebuild:
Stable for ppc64, wrt bug #454388
01 Jul 2013; Jeroen Roovers <jer@gentoo.org> pambase-20120417-r2.ebuild:
Stable for HPPA (bug #454388).
30 Jun 2013; Agostino Sarubbo <ago@gentoo.org> pambase-20120417-r2.ebuild:
Stable for ppc, wrt bug #454388
30 Jun 2013; Agostino Sarubbo <ago@gentoo.org> pambase-20120417-r2.ebuild:
Stable for x86, wrt bug #454388
30 Jun 2013; Agostino Sarubbo <ago@gentoo.org> pambase-20120417-r2.ebuild:
Stable for amd64, wrt bug #454388
28 Jun 2013; Alexis Ballier <aballier@gentoo.org> pambase-20101024-r2.ebuild,
pambase-20120417.ebuild, pambase-20120417-r1.ebuild,
pambase-20120417-r2.ebuild:
allow openpam for krb5
*pambase-20120417-r2 (15 Jun 2013)
15 Jun 2013; Johannes Huber <johu@gentoo.org>
+files/pambase-20120417-lastlog-silent.patch, +pambase-20120417-r2.ebuild:
Revision bump adds patch to make lastlog messages silent by Dennis Schridde
<devurandom@gmx.net> wrt bug #468798. Acked by Diego Elio Pettenò
<flameeyes@gentoo.org> on irc.
*pambase-20120417-r1 (19 Jun 2012)
19 Jun 2012; Samuli Suominen <ssuominen@gentoo.org>
+pambase-20120417-r1.ebuild, +files/pambase-20120417-systemd.patch,
metadata.xml:
Use `usex` from eutils.eclass for defining "varvalue". Support for
pam_systemd.so wrt #372229 by Michał Górny.
19 May 2012; Diego E. Pettenò <flameeyes@gentoo.org>
pambase-20101024-r2.ebuild, pambase-20120417.ebuild:
Nix-out src_test as there are no tests.
06 May 2012; Zac Medico <zmedico@gentoo.org> pambase-20120417.ebuild:
Add blocker for !<sys-apps/shadow-4.1.5-r1 due to file collisions with
/etc/pam.d/{login,passwd,su}.
26 Apr 2012; Alexis Ballier <aballier@gentoo.org> pambase-20101024-r2.ebuild:
keyword ~amd64-fbsd
22 Apr 2012; Alexis Ballier <aballier@gentoo.org> pambase-20120417.ebuild:
keyword -*-fbsd for bug #413077
*pambase-20120417 (17 Apr 2012)
17 Apr 2012; Pawel Hajdan jr <phajdan.jr@gentoo.org>
+pambase-20120417.ebuild:
Version bump.
28 Jan 2012; Samuli Suominen <ssuominen@gentoo.org> -pambase-20101024.ebuild,
-pambase-20101024-r1.ebuild:
old
28 Jan 2012; Samuli Suominen <ssuominen@gentoo.org>
pambase-20101024-r2.ebuild:
Stabilize for everyone since this is now same as current stable.
*pambase-20101024-r2 (28 Jan 2012)
28 Jan 2012; Samuli Suominen <ssuominen@gentoo.org>
+pambase-20101024-r2.ebuild:
Restore "nox11" as pam_ck_connector.so argument because most of the display
managers in tree, including XDM and SLIM, has native ConsoleKit support now.
*pambase-20101024-r1 (22 Oct 2011)
22 Oct 2011; Samuli Suominen <ssuominen@gentoo.org>
+pambase-20101024-r1.ebuild:
Remove nox11 argument from pam_ck_connector.so wrt #342345
28 Nov 2010; Constanze Hausner <constanze@gentoo.org>
pambase-20090620.1-r1.ebuild, pambase-20100310.ebuild,
pambase-20100925.ebuild, pambase-20101024.ebuild, metadata.xml:
Renamed useflags ssh/kerberos to pam_ssh/pam_krb5 and changed kerberos dep
to >=sys-auth/pam_krb5-4.3
27 Nov 2010; Raúl Porcel <armin76@gentoo.org> pambase-20101024.ebuild:
alpha/ia64/m68k/s390/sh/sparc stable
03 Nov 2010; Markus Meier <maekke@gentoo.org> pambase-20101024.ebuild:
arm stable, bug #343099
01 Nov 2010; Jeroen Roovers <jer@gentoo.org> pambase-20101024.ebuild:
Stable for HPPA PPC (bug #343099).
01 Nov 2010; Christian Faulhammer <fauli@gentoo.org>
pambase-20101024.ebuild:
stable x86, bug 343099
30 Oct 2010; Samuli Suominen <ssuominen@gentoo.org>
pambase-20101024.ebuild:
ppc64 stable wrt #343099
29 Oct 2010; Markos Chandras <hwoarang@gentoo.org>
pambase-20101024.ebuild:
Stable on amd64 wrt bug #343099
*pambase-20101024 (23 Oct 2010)
23 Oct 2010; Diego E. Pettenò <flameeyes@gentoo.org>
+pambase-20101024.ebuild:
Version bump; add pam_loginuid on Linux-PAM for bug #342345.
22 Oct 2010; Jeroen Roovers <jer@gentoo.org> pambase-20100925.ebuild:
Marked ~hppa (bug #329585).
*pambase-20100925 (25 Sep 2010)
25 Sep 2010; Diego E. Pettenò <flameeyes@gentoo.org>
-pambase-20100819.ebuild, +pambase-20100925.ebuild, metadata.xml:
Version bump (and remove old); the new version adds a minimal USE flag.
04 Sep 2010; Raúl Porcel <armin76@gentoo.org> pambase-20100819.ebuild:
Add ~alpha/~ia64 wrt #329585
03 Sep 2010; Diego E. Pettenò <flameeyes@gentoo.org>
pambase-20090620.1-r1.ebuild, pambase-20100310.ebuild:
Change URI to point to dev.gentoo.org rather than my host.
*pambase-20100819 (19 Aug 2010)
19 Aug 2010; Diego E. Pettenò <flameeyes@gentoo.org>
-pambase-20100724.ebuild, +pambase-20100819.ebuild:
Bump pambase to fix bug #333393 reported by Simon Alman.
02 Aug 2010; Markus Meier <maekke@gentoo.org> pambase-20100724.ebuild:
add ~arm, bug #329585
*pambase-20100724 (24 Jul 2010)
24 Jul 2010; Diego E. Pettenò <flameeyes@gentoo.org>
-pambase-20100723.ebuild, +pambase-20100724.ebuild:
Bump to fix pam_krb5 auth login (bug #329599).
23 Jul 2010; Diego E. Pettenò <flameeyes@gentoo.org> metadata.xml:
Update metadata description of USE flags.
*pambase-20100723 (23 Jul 2010)
23 Jul 2010; Diego E. Pettenò <flameeyes@gentoo.org>
+pambase-20100723.ebuild:
Add a new version that adds support for Kerberos authentication on system
(with Linux-PAM only).
15 Apr 2010; Brent Baude <ranger@gentoo.org> pambase-20100310.ebuild:
Marking pambase-20100310 ppc for bug 308075
04 Apr 2010; Raúl Porcel <armin76@gentoo.org> pambase-20100310.ebuild:
alpha/arm/ia64/m68k/s390/sh/sparc stable wrt #308075
30 Mar 2010; Jonathan Callen <abcd@gentoo.org> pambase-20100310.ebuild:
Bump to EAPI=3, add prefix keywords
29 Mar 2010; Markus Meier <maekke@gentoo.org> pambase-20100310.ebuild:
amd64 stable, bug #308075
24 Mar 2010; Jeroen Roovers <jer@gentoo.org> pambase-20100310.ebuild:
Stable for HPPA (bug #308075).
18 Mar 2010; Christian Faulhammer <fauli@gentoo.org>
pambase-20100310.ebuild:
stable x86, security bug 308075
*pambase-20100310 (10 Mar 2010)
10 Mar 2010; Diego E. Pettenò <flameeyes@gentoo.org>
-pambase-20081028.ebuild, +pambase-20100310.ebuild:
Version bump and remove old version. The new version simply improves on
the system-services stack to be usable with fcron.
21 Nov 2009; Raúl Porcel <armin76@gentoo.org>
pambase-20090620.1-r1.ebuild:
alpha/ia64/m68k/s390/sh/sparc stable wrt #284088
09 Oct 2009; Markus Meier <maekke@gentoo.org>
pambase-20090620.1-r1.ebuild:
arm stable, bug #284088
27 Sep 2009; nixnut <nixnut@gentoo.org> pambase-20090620.1-r1.ebuild:
ppc stable #284088
26 Sep 2009; Romain Perier <mrpouet@gentoo.org>
pambase-20090620.1-r1.ebuild:
Stable for amd64 per bug #284088.
22 Sep 2009; Jeroen Roovers <jer@gentoo.org> pambase-20090620.1-r1.ebuild:
Stable for HPPA (bug #284088).
16 Sep 2009; Christian Faulhammer <fauli@gentoo.org>
pambase-20090620.1-r1.ebuild:
stable x86, bug 284088
14 Sep 2009; Tom Gall <tgall@gentoo.org> pambase-20090620.1-r1.ebuild:
stable on ppc64, bug #284088
08 Sep 2009; Diego E. Pettenò <flameeyes@gentoo.org>
-pambase-20090515.ebuild:
Remove old version.
*pambase-20090620.1-r1 (10 Aug 2009)
10 Aug 2009; Diego E. Pettenò <flameeyes@gentoo.org>
-pambase-20090620.1.ebuild, +pambase-20090620.1-r1.ebuild:
Revision bump to add the portage-utils dependency (without this, Linux-PAM
version is not properly calculated, and tally2 is not used).
*pambase-20090620.1 (20 Jun 2009)
20 Jun 2009; Diego E. Pettenò <flameeyes@gentoo.org>
-pambase-20090620.ebuild, +pambase-20090620.1.ebuild:
Further pam_tally2 fixes.
*pambase-20090620 (20 Jun 2009)
20 Jun 2009; Diego E. Pettenò <flameeyes@gentoo.org>
+pambase-20090620.ebuild:
Bump so to enable pam_tall2 properly when building with Linux-PAM-1.1.0.
*pambase-20090515 (15 May 2009)
15 May 2009; Diego E. Pettenò <flameeyes@gentoo.org>
-pambase-20080318.ebuild, -pambase-20081028-r1.ebuild,
-pambase-20090430.ebuild, +pambase-20090515.ebuild:
Version bump and cleanup old version. The new version only fixes a minor
problem with Gentoo/FreeBSD.
*pambase-20090430 (30 Apr 2009)
30 Apr 2009; Diego E. Pettenò <flameeyes@gentoo.org>
+pambase-20090430.ebuild:
Add a new pambase version, with a stricter dependency on ConsoleKit and
support for remote sessions as well as local. Should fix bug #260842 (PAM
side).
21 Mar 2009; Jeroen Roovers <jer@gentoo.org> pambase-20081028.ebuild:
Stable for HPPA (bug #261595).
17 Mar 2009; Raúl Porcel <armin76@gentoo.org> pambase-20081028.ebuild:
m68k stable wrt #261595, thanks to kolla for testing
15 Mar 2009; Brent Baude <ranger@gentoo.org> pambase-20081028.ebuild:
stable ppc64, bug 261595
14 Mar 2009; Raúl Porcel <armin76@gentoo.org> pambase-20081028.ebuild:
arm/ia64/s390/sh/sparc stable wrt #261595
14 Mar 2009; nixnut <nixnut@gentoo.org> pambase-20081028.ebuild:
ppc stable #261595
11 Mar 2009; Tobias Klausmann <klausman@gentoo.org>
pambase-20081028.ebuild:
Stable on alpha, bug #261595
08 Mar 2009; Markus Meier <maekke@gentoo.org> pambase-20081028.ebuild:
amd64/x86 stable, bug #261595
07 Mar 2009; Diego E. Pettenò <flameeyes@gentoo.org>
-pambase-20080730.ebuild, -pambase-20080801.ebuild,
-pambase-20080801-r1.ebuild:
Cleanup old versions.
09 Nov 2008; Mike Frysinger <vapier@gentoo.org>
pambase-20081028-r1.ebuild:
Add arm/s390/sh #232691.
*pambase-20081028-r1 (28 Oct 2008)
*pambase-20081028 (28 Oct 2008)
28 Oct 2008; Diego Pettenò <flameeyes@gentoo.org>
+pambase-20081028.ebuild, +pambase-20081028-r1.ebuild:
Version bump to create the new system-services pam.d file.
*pambase-20080801-r1 (29 Sep 2008)
29 Sep 2008; Diego Pettenò <flameeyes@gentoo.org>
+pambase-20080801-r1.ebuild:
Add a new revision using EAPI=2.
22 Aug 2008; Alexis Ballier <aballier@gentoo.org> pambase-20080801.ebuild:
keyword ~sparc-fbsd
10 Aug 2008; Ricardo Mendoza <ricmm@gentoo.org> pambase-20080801.ebuild:
Add ~mips, bug #232691
10 Aug 2008; Raúl Porcel <armin76@gentoo.org> pambase-20080801.ebuild:
Add ~ia64 wrt #232691
10 Aug 2008; Tobias Klausmann <klausman@gentoo.org>
pambase-20080801.ebuild:
Keyworded on alpha, bug #232691
02 Aug 2008; Markus Rothe <corsair@gentoo.org> pambase-20080801.ebuild:
It was meant to be ~ppc64...
02 Aug 2008; Markus Rothe <corsair@gentoo.org> pambase-20080801.ebuild:
Stable on ppc64; bug #232691
*pambase-20080801 (01 Aug 2008)
01 Aug 2008; Diego Pettenò <flameeyes@gentoo.org> metadata.xml,
+pambase-20080801.ebuild:
New pambase with optional support for SHA512-hashed passwords (enabled by
default). This will deprecated sys-auth/pam_sha512.
31 Jul 2008; Vlastimil Babka <caster@gentoo.org> ChangeLog:
Fix distfile size and hashes in Manifest, bug #233462.
31 Jul 2008; Javier Villavicencio <the_paya@gentoo.org>
pambase-20080730.ebuild:
Keyworded ~x86-fbsd.
*pambase-20080730 (30 Jul 2008)
30 Jul 2008; Diego Pettenò <flameeyes@gentoo.org>
-pambase-20080723.1.ebuild, +pambase-20080730.ebuild:
Bump to complete fixes for FreeBSD.
*pambase-20080723.1 (23 Jul 2008)
23 Jul 2008; Diego Pettenò <flameeyes@gentoo.org>
-pambase-20080723.ebuild, +pambase-20080723.1.ebuild:
Version bump with two minor fixes for Gentoo/FreeBSD.
23 Jul 2008; Ferris McCormick <fmccor@gentoo.org> pambase-20080723.ebuild:
Rekeyword for ~sparc (allow pam_ssh), Bug #232691.
23 Jul 2008; Jeroen Roovers <jer@gentoo.org> pambase-20080723.ebuild:
Marked ~hppa (bug #232691).
*pambase-20080723 (22 Jul 2008)
22 Jul 2008; Diego Pettenò <flameeyes@gentoo.org> metadata.xml,
+pambase-20080723.ebuild:
Add new pambase version, with added support for sys-auth/pam_ssh. Also
contains fixes for bug #232669 for Gentoo/FreeBSD 7 systems. See bug
#232691 for keywording request.
04 Jul 2008; <ricmm@gentoo.org> pambase-20080318.ebuild:
Add ~mips, bug #230743
22 Jun 2008; Thomas Anderson <gentoofan23@gentoo.org>
pambase-20080318.ebuild:
amd64 stable, bug #225901
14 Jun 2008; nixnut <nixnut@gentoo.org> pambase-20080318.ebuild:
Stable on ppc wrt bug 225901
13 Jun 2008; Brent Baude <ranger@gentoo.org> pambase-20080318.ebuild:
Marking pambase-20080318 ppc64 for bug 225901
13 Jun 2008; Tobias Klausmann <klausman@gentoo.org>
pambase-20080318.ebuild:
Stable on alpha, bug #225901
13 Jun 2008; Raúl Porcel <armin76@gentoo.org> pambase-20080318.ebuild:
ia64/sparc stable wrt #225901
13 Jun 2008; Jeroen Roovers <jer@gentoo.org> pambase-20080318.ebuild:
Stable for HPPA (bug #225901).
11 Jun 2008; Christian Faulhammer <opfer@gentoo.org>
pambase-20080318.ebuild:
stable x86, bug 225901
11 Jun 2008; Diego Pettenò <flameeyes@gentoo.org>
-pambase-20080305.ebuild:
Remove old version.
10 Jun 2008; Alexis Ballier <aballier@gentoo.org> pambase-20080318.ebuild:
keyword ~sparc-fbsd
08 Jun 2008; Javier Villavicencio <the_paya@gentoo.org>
pambase-20080318.ebuild:
Keyworded ~x86-fbsd.
04 Jun 2008; Markus Rothe <corsair@gentoo.org> pambase-20080318.ebuild:
Added ~ppc64; bug #224555
22 Apr 2008; Diego Pettenò <flameeyes@gentoo.org> metadata.xml,
-pambase-20080306.1.ebuild, -pambase-20080306.2.ebuild,
pambase-20080318.ebuild:
Remove old versions and replace gnome USE fag with gnome-keyring. Closes
bug #218856.
12 Apr 2008; Tobias Scherbaum <dertobi123@gentoo.org>
pambase-20080318.ebuild:
Added ~ppc, bug #212437
24 Mar 2008; Raúl Porcel <armin76@gentoo.org> pambase-20080318.ebuild:
Add ~ia64/~sparc wrt #212437
*pambase-20080318 (18 Mar 2008)
18 Mar 2008; Diego Pettenò <flameeyes@gentoo.org>
+pambase-20080318.ebuild:
Add new pambase package that should fix the Gnome Keyring problems in bug
#213578.
17 Mar 2008; Santiago M. Mola <coldwind@gentoo.org>
pambase-20080306.2.ebuild:
Added ~amd64
15 Mar 2008; Tobias Klausmann <klausman@gentoo.org>
pambase-20080306.2.ebuild:
Keyworded for (~)alpha, bug 212437
13 Mar 2008; Jeroen Roovers <jer@gentoo.org> pambase-20080306.2.ebuild:
Marked ~hppa (bug #212437).
*pambase-20080306.2 (06 Mar 2008)
06 Mar 2008; Diego Pettenò <flameeyes@gentoo.org> metadata.xml,
+pambase-20080306.2.ebuild:
Add a new release with pam_mktemp as a dependency. This means a few more
keywords needed, sorry.
06 Mar 2008; Raúl Porcel <armin76@gentoo.org> pambase-20080306.1.ebuild:
Add ~alpha/~ia64
*pambase-20080306.1 (05 Mar 2008)
05 Mar 2008; Diego Pettenò <flameeyes@gentoo.org>
-pambase-20080306.ebuild, +pambase-20080306.1.ebuild:
Make it work fine on Linux-PAM too.
05 Mar 2008; Diego Pettenò <flameeyes@gentoo.org>
pambase-20080306.ebuild:
Forgot to add to IUSE.
*pambase-20080306 (05 Mar 2008)
05 Mar 2008; Diego Pettenò <flameeyes@gentoo.org> metadata.xml,
+pambase-20080306.ebuild:
New version of pambase with a passwdqc USE flag to enable use of pam_passwdqc.
05 Mar 2008; Ferris McCormick <fmccor@gentoo.org> pambase-20080305.ebuild:
Add ~sparc for testing, part of Bug #210770 --- pam still works for me.
*pambase-20080305 (05 Mar 2008)
05 Mar 2008; Diego Pettenò <flameeyes@gentoo.org>
-pambase-20080301.ebuild, +pambase-20080305.ebuild:
Bump to avoid calling git during ebuild phases. Closes bug #212395.
04 Mar 2008; Brent Baude <ranger@gentoo.org> ChangeLog:
keyworded ~arch for ppc64, bug 210769
04 Mar 2008; Brent Baude <ranger@gentoo.org> pambase-20080301.ebuild:
keyworded ~arch for ppc64, bug 210770
04 Mar 2008; Christian Faulhammer <opfer@gentoo.org>
pambase-20080301.ebuild:
keyword ~x86 for bug 210770
03 Mar 2008; Jeroen Roovers <jer@gentoo.org> pambase-20080301.ebuild:
Marked ~hppa (bug #210770).
01 Mar 2008; Diego Pettenò <flameeyes@gentoo.org>
pambase-20080301.ebuild:
Fix HOMEPAGE. Thanks creidiki.
*pambase-20080301 (01 Mar 2008)
01 Mar 2008; Diego Pettenò <flameeyes@gentoo.org>
-pambase-20080224.ebuild, +pambase-20080301.ebuild:
Version bump, should fix su(1) problems under FreeBSD. See bug #211895.
*pambase-20080224 (24 Feb 2008)
24 Feb 2008; Diego Pettenò <flameeyes@gentoo.org>
-pambase-20080221.ebuild, +pambase-20080224.ebuild:
Version bump to fix bug #211123.
21 Feb 2008; Diego Pettenò <flameeyes@gentoo.org> metadata.xml:
Add long description for gnome and consolekit USE flags.
21 Feb 2008; Diego Pettenò <flameeyes@gentoo.org>
pambase-20080221.ebuild:
Forgot to add flags to IUSE.
*pambase-20080221 (21 Feb 2008)
21 Feb 2008; Diego Pettenò <flameeyes@gentoo.org>
-pambase-20080219.1.ebuild, +pambase-20080221.ebuild:
Bump pambase, now it supports gnome and consolekit USE flags that allows it
to enable by default GNOME keyring (all sessions) and ConsoleKit (local
sessions).
20 Feb 2008; Diego Pettenò <flameeyes@gentoo.org>
pambase-20080219.1.ebuild:
Explitly set DEPEND to empty.
*pambase-20080219.1 (19 Feb 2008)
19 Feb 2008; Diego Pettenò <flameeyes@gentoo.org>
-pambase-20080219.ebuild, +pambase-20080219.1.ebuild:
New pambase that install system-local-login and system-remote-login.
19 Feb 2008; Diego Pettenò <flameeyes@gentoo.org>
pambase-20080219.ebuild:
Also accept openpam and freebsd/netbsd-pam-modules, and block older
freebsd-pam-modules.
*pambase-20080219 (19 Feb 2008)
19 Feb 2008; Diego Pettenò <flameeyes@gentoo.org> +metadata.xml,
+pambase-20080219.ebuild:
Initial import, pambase package provides the basic configuration files for
PAM (either Linux-PAM or OpenPAM).

View File

@ -0,0 +1,25 @@
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
AUX pambase-20120417-lastlog-silent.patch 694 SHA256 9bce9de7831fcafaee0c5f56b28ed91d4e1974bef806f50b38cca82189f81782 SHA512 3bcef6d9e97cf38df079675ffdffaf233a185bbb09bf79930c81b8b7b802247de0f0bfb9e69d935bce7a7297f544f1c7abc199224e7a536cdfe606f2c0217500 WHIRLPOOL a4db8e5ab534cfc80d9452165dc492853f6fa717025dc49daab4c51847ea03a584ad6a44317804f56361e8916cab0d897bd8d8f065c31afd0ae22df5d8eaf367
AUX pambase-20120417-systemd-auth.patch 937 SHA256 27d6d03273818922ee2d1de28bbce496b88fbdea7363743bd3e80a9233a9ae02 SHA512 0d78a7dd4851bccf95bb3f92c095c4fc4e7fbbc077c1369797aa230e21763ecb6d087c17bc22c93adeaa695305179d54d838f2e4fe25e9ff16c683fb1edbb2bf WHIRLPOOL c38bdb6b37c885c2b07b59966ae77ec572d89be1ff6a35cc715a8f20e386c8f5471687a30049a1a94c64927d60d8c52dbc09744f153ddd2bdc053461d7bf35c2
AUX pambase-20120417-systemd.patch 608 SHA256 888f05068801f11cb49988a3da64f658782f0056410fdb7d68d240a7d1f619ff SHA512 c06d4e35cae11b1156ba32051a4f25a4551857081e9a723f5c0b48758859d7794de94889eb91b19424b49bd4fd5509d34cba943d7a7bbc89f4339a771f29f754 WHIRLPOOL 0336ca519f528e3a0ac840d9da84cc7f28b420ee2864090dac459fd163962e251aa83e11bfd8d02bc7a8a313bac92598df19fb1278dd98a167942cbbca692de2
DIST pambase-20101024.tar.bz2 3201 SHA256 89d60dd598d3da0ce1d1bcd7dc325f6c55002a1d4a7d27f9bb024f6732e9fba4 SHA512 8d2a89b38d94d2e423a033ea6922c0a0039a0fb64d60c05991d877b4fa893954723fe1c1763f3f67ed6fbc3639282a4ee1d76824f7f29025b6050632a6984b6f WHIRLPOOL 644965507d1f537c357a7020c13282d9de4131a6cf72e589b1e750e3b86a2185b9a882d0b3f865145a86e1ef613e4b92998be53734aefb6d6d8a69f65de806a4
DIST pambase-20120417.tar.bz2 3361 SHA256 3fde3ff7714b3722b45545da36fdde6ca95a55d1b0a8cfb23666ec0de3ec5871 SHA512 7a666eb67f6484e536ecb070402036bcfdd137aced27df3f08b136d06eee5c13a6dc14aa93ea09e94c7f31e5a98db97dbaccd0c46af24b57028247de3a7cd9fe WHIRLPOOL 323edb9ef488a0ba562ef279d4acfb682540bf87838be9a3319ad2029ba1465d015fdf94c3192e24517ae9f0ed264e38d17aba65934211bd7b39bf309ee12540
DIST pambase-20140313.tar.bz2 3417 SHA256 70f11281975eb1d7b14f36a16d2b9eff78099a246aeda96e4f8c667b2574b2a4 SHA512 76dd2a70947dac9573d47b81764ebe4f829bfd38d59c007e698a52c70757fa88525f510c14a1f474c58e3d33cb421ff61aa4ed1aae54497456004eff7494bfc8 WHIRLPOOL e9aac79b37c76af4389d193cb4eb79ad4372e25520a3f6bba6b473948999f1ac2ade00930180a4b9f47cdd7a458d1a174bd15ccf0a94130d216118d7d76485a9
EBUILD pambase-20101024-r2.ebuild 3014 SHA256 b272693995d3a8f7b3df911e2088fa9a0db29d3836f09f4f461994ac5408e8e6 SHA512 e9b7bec4d03cec178783704b7907e3b0988be7c698e976e87f5df5386d0661da8bc3cfd647941c33aac4c6859cad00366fccc5b1f3d6885032df8338806375d6 WHIRLPOOL a9959b69c34541ac54b8a6e33e5e9981bfc22923577d6bfc35cdd008ea513d08d17fa43e3f97c02b96a6597dc0e1f7ebd40d4301328e5e88ae5b066598eb8173
EBUILD pambase-20120417-r3.ebuild 3633 SHA256 8ce9b1c6da9fe73b49cfe5c020e2498786801dddaf859d2ef6568cba745a425f SHA512 b95f45f3636ac25c22ca66aebd1e4d1a907300f67bd0b78d0bf9253c01830c02e1d28706a07a1f0e4995bb519d107b7dc7680457092c1719cd7b1551bd119e72 WHIRLPOOL c0eb0c3ee63762e903836a34769de4556e58ce5b22c2e3bc38f8bdedb66c583b5dfc74388af8ee6428718f6c06220d4cfb2b8c6b354296633a861848fc1fc1d7
EBUILD pambase-20140313.ebuild 3414 SHA256 935a78dc207d4dbf6157d2feb20e54b552d36db4ea1f339f9133d7ca3455762b SHA512 b728d4ebce191d704441f421c1159be1d77cc5f02aada57d68bc0aa3172b5d4cbce406ac90ecf7f75bf5347d007b44721cd7493bdd003d5d6773d094f915200f WHIRLPOOL 5013b89d783dd37ec40d0dff9266a5e9fcd9b4346796c1524ee30318ce0b702a937336dee1dc94b584328edc09f226cdbca9d65186e6f72f862dfaa32942d21b
MISC ChangeLog 20383 SHA256 676206e9193ad01a0736f1cf00d2dbbf7f845a17aab7da4e8ba9cbac85c68e53 SHA512 635bbf92544e0f0aa0b5b47911ca0f8e197246e1e782c572eaaa34effd8181a168987097375a266a7ff040f0b487c935d89ed3576c6f6e5ecaf0fa3b2a19c90c WHIRLPOOL 341e0dba145e7c6ee5921cdad069cc9947a9c6a51d19ea5f8153120c0690273ec4b87ec07d8d0c619424961854bc6437ce29410d1c34e186a9cc1c6d2b4527a6
MISC metadata.xml 3794 SHA256 fbddb3cd938b849feff7cc84fdad0d0b67b905a3ae97526047287208b098392c SHA512 ea6d2c31478a6394fb635dfaf100306a9429a645163a8859aa85056cf7805aa2fb57e7f20529b5ad3e0e4a45655cf45c6265786a640617d68a0438fabf43f784 WHIRLPOOL 534af71fe9c1ef2757d39e447d18730fdd5d4ffc762e9bde9ce09c2a507abd65c34c483abc20822a5e57ebdb8bb0b86e837337b46c3d14615aca7eabd776ffc7
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
iQEcBAEBCAAGBQJTIcBVAAoJEEdUh39IaPFNhZIH/jHp40YNt+V9z2pHvFGifdF/
2vVMkXB8yR3ShHWCsJUylWeCnHUbSloRz05CzmMeinGDH7W091u1Mx/DRbtnScCi
RGtbuz0XYklWJpJPf7Hct+te9Lofpf2hOIdGvGnb6XTeGGaoOw2HMka/FHp2s+45
qpuMy+4RHxremWyD7O2u50kjaz+hQykFF1b3wW6KKLdB7lAQB+ky8DP4pEKkZu3e
PwuC3bet/L7Z0grPiF3n3qUPuA6uAhWwuM83iB41prbgLRoBrtJZ6FrT7scTDOIN
uBX9HJrdnsquoS3TVT8OGx+5etA0/30j9e3/Ftz8+ZPQsaUpmf+Ru/H1k0ZF8JM=
=XJhJ
-----END PGP SIGNATURE-----

View File

@ -0,0 +1,20 @@
--- pambase-20120417/login.in.orig 2012-11-21 14:31:49.031948988 +0100
+++ pambase-20120417/login.in 2012-11-21 14:32:41.172330601 +0100
@@ -3,4 +3,6 @@
account include system-local-login
password include system-local-login
+
+session optional pam_lastlog.so DEBUG
session include system-local-login
--- pambase-20120417/system-login.in.orig 2012-11-21 14:31:42.232160039 +0100
+++ pambase-20120417/system-login.in 2012-11-21 14:35:20.738025880 +0100
@@ -41,7 +41,7 @@
session required pam_env.so DEBUG
#endif
#if HAVE_LASTLOG
-session optional pam_lastlog.so DEBUG
+session optional pam_lastlog.so silent DEBUG
#endif
session include system-auth
#if HAVE_CONSOLEKIT

View File

@ -0,0 +1,39 @@
diff -ur pambase-20140313.orig/system-auth.in pambase-20140313/system-auth.in
--- pambase-20140313.orig/system-auth.in 2014-03-13 07:13:15.000000000 -0700
+++ pambase-20140313/system-auth.in 2016-05-02 12:57:35.437730031 -0700
@@ -7,7 +7,8 @@
#if HAVE_KRB5
auth KRB5_CONTROL pam_krb5.so KRB5_PARAMS
#endif
-auth required pam_unix.so try_first_pass LIKEAUTH nullok DEBUG
+auth sufficient pam_sss.so use_first_pass
+auth sufficient pam_unix.so try_first_pass LIKEAUTH nullok DEBUG
/* This is needed to make sure that the Kerberos skip-on-success won't cause a bad jump. */
auth optional pam_permit.so
@@ -16,6 +17,7 @@
#endif
account required pam_unix.so DEBUG
/* This is needed to make sure that the Kerberos skip-on-success won't cause a bad jump. */
+account [default=bad success=ok user_unknown=ignore] pam_sss.so
account optional pam_permit.so
#if HAVE_CRACKLIB
@@ -27,7 +29,8 @@
#if HAVE_KRB5
password KRB5_CONTROL pam_krb5.so KRB5_PARAMS
#endif
-password required pam_unix.so try_first_pass UNIX_AUTHTOK nullok UNIX_EXTENDED_ENCRYPTION DEBUG
+password sufficient pam_unix.so try_first_pass UNIX_AUTHTOK nullok UNIX_EXTENDED_ENCRYPTION DEBUG
+password sufficient pam_sss.so use_authtok
/* This is needed to make sure that the Kerberos skip-on-success won't cause a bad jump. */
password optional pam_permit.so
diff -ur pambase-20140313.orig/system-session.inc pambase-20140313/system-session.inc
--- pambase-20140313.orig/system-session.inc 2014-03-13 07:13:15.000000000 -0700
+++ pambase-20140313/system-session.inc 2016-05-02 12:57:59.723883487 -0700
@@ -23,3 +23,4 @@
#endif
session optional pam_permit.so
+session optional pam_sss.so

View File

@ -0,0 +1,26 @@
diff -u pambase-20120417.old/system-auth.in pambase-20120417/system-auth.in
--- pambase-20120417.old/system-auth.in 2013-10-27 15:58:21.766193297 +0100
+++ pambase-20120417/system-auth.in 2013-10-27 16:01:10.614555766 +0100
@@ -35,3 +35,7 @@
session optional pam_ssh.so
#endif
#include "system-session.inc"
+
+#if HAVE_SYSTEMD
+-session optional pam_systemd.so
+#endif
Sólo en pambase-20120417: system-auth.in~
diff -u pambase-20120417.old/system-login.in pambase-20120417/system-login.in
--- pambase-20120417.old/system-login.in 2013-10-27 15:58:21.766193297 +0100
+++ pambase-20120417/system-login.in 2013-10-27 15:59:42.032316285 +0100
@@ -47,9 +47,6 @@
#if HAVE_CONSOLEKIT
-session optional pam_ck_connector.so nox11
#endif
-#if HAVE_SYSTEMD
--session optional pam_systemd.so
-#endif
#if HAVE_GNOME_KEYRING
session optional pam_gnome_keyring.so auto_start
#endif
Sólo en pambase-20120417: system-login.in~

View File

@ -0,0 +1,29 @@
http://bugs.gentoo.org/372229
--- Makefile
+++ Makefile
@@ -28,6 +28,10 @@
PAMFLAGS += -DHAVE_CONSOLEKIT=1
endif
+ifeq "$(SYSTEMD)" "yes"
+PAMFLAGS += -DHAVE_SYSTEMD=1
+endif
+
ifeq "$(GNOME_KEYRING)" "yes"
PAMFLAGS += -DHAVE_GNOME_KEYRING=1
endif
--- system-login.in
+++ system-login.in
@@ -45,7 +45,10 @@
#endif
session include system-auth
#if HAVE_CONSOLEKIT
-session optional pam_ck_connector.so nox11
+-session optional pam_ck_connector.so nox11
+#endif
+#if HAVE_SYSTEMD
+-session optional pam_systemd.so
#endif
#if HAVE_GNOME_KEYRING
session optional pam_gnome_keyring.so auto_start

View File

@ -0,0 +1,84 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
<pkgmetadata>
<herd>pam</herd>
<maintainer>
<email>pam-bugs@gentoo.org</email>
</maintainer>
<use>
<flag name="cracklib">
Enable pam_cracklib module on system authentication stack. This
produces warnings when changing password to something easily
crackable. It requires the same USE flag to be enabled on
<pkg>sys-libs/pam</pkg> or system login might be impossible.
</flag>
<flag name="consolekit">
Enable pam_ck_connector module on local system logins. This
allows for console logins to make use of ConsoleKit
authorization.
</flag>
<flag name="systemd">
Use pam_systemd module to register user sessions in the systemd
control group hierarchy.
</flag>
<flag name="gnome-keyring">
Enable pam_gnome_keyring module on system login stack. This
enables proper Gnome Keyring access to logins, whether they are
done with the login shell, a Desktop Manager or a remote login
systems such as SSH.
</flag>
<flag name="debug">
Enable debug information logging on syslog(3) for all the
modules supporting this in the system authentication and system
login stacks.
</flag>
<flag name="passwdqc">
Enable pam_passwdqc module on system auth stack for password
quality validation. This is an alternative to pam_cracklib
producing warnings, rejecting or providing example passwords
when changing your system password. It is used by default by
OpenWall GNU/*/Linux and by FreeBSD.
</flag>
<flag name="mktemp">
Enable pam_mktemp module on system auth stack for session
handling. This module creates a private temporary directory for
the user, and sets TMP and TMPDIR accordingly.
</flag>
<flag name="pam_ssh">
Enable pam_ssh module on system auth stack for authentication
and session handling. This module will accept as password the
passphrase of a private SSH key (one of ~/.ssh/id_rsa,
~/.ssh/id_dsa or ~/.ssh/identity), and will spawn an ssh-agent
instance to cache the open key.
</flag>
<flag name="sha512">
Switch Linux-PAM's pam_unix module to use sha512 for passwords
hashes rather than MD5. This option requires
<pkg>&gt;=sys-libs/pam-1.0.1</pkg> built against
<pkg>&gt;=sys-libs/glibc-2.7</pkg>, if it's built against an
earlier version, it will silently be ignored, and MD5 hashes
will be used. All the passwords changed after this USE flag is
enabled will be saved to the shadow file hashed using SHA512
function. The password previously saved will be left
untouched. Please note that while SHA512-hashed passwords will
still be recognised if the USE flag is removed, the shadow file
will not be compatible with systems using an earlier glibc
version.
</flag>
<flag name="pam_krb5">
Enable pam_krb5 module on system auth stack, as an alternative
to pam_unix. If Kerberos authentication succeed, only pam_unix
will be ignore, and all the other modules will proceed as usual,
including Gnome Keyring and other session modules. It requires
<pkg>sys-libs/pam</pkg> as PAM implementation.
</flag>
<flag name="minimal">
Disables the standard PAM modules that provide extra information
to users on login; this includes pam_tally (and pam_tally2 for
Linux PAM 1.1 and later), pam_lastlog, pam_motd and other
similar modules. This might not be a good idea on a multi-user
system but could reduce slightly the overhead on single-user
non-networked systems.
</flag>
</use>
</pkgmetadata>

View File

@ -0,0 +1,116 @@
# Copyright 1999-2014 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/sys-auth/pambase/pambase-20120417-r3.ebuild,v 1.11 2014/01/18 05:16:11 vapier Exp $
EAPI=5
inherit eutils
DESCRIPTION="PAM base configuration files"
HOMEPAGE="http://www.gentoo.org/proj/en/base/pam/"
SRC_URI="http://dev.gentoo.org/~flameeyes/${PN}/${P}.tar.bz2
http://dev.gentoo.org/~phajdan.jr/${PN}/${P}.tar.bz2"
LICENSE="GPL-2"
SLOT="0"
KEYWORDS="alpha amd64 arm arm64 hppa ia64 m68k ~mips ppc ppc64 s390 sh sparc x86 -sparc-fbsd -x86-fbsd ~x86-freebsd ~amd64-linux ~ia64-linux ~x86-linux"
IUSE="consolekit cracklib debug gnome-keyring minimal mktemp pam_krb5 pam_ssh passwdqc selinux +sha512 systemd"
RESTRICT=binchecks
MIN_PAM_REQ=1.1.3
RDEPEND="
|| (
>=sys-libs/pam-${MIN_PAM_REQ}
( sys-auth/openpam || ( sys-freebsd/freebsd-pam-modules sys-netbsd/netbsd-pam-modules ) )
)
consolekit? ( >=sys-auth/consolekit-0.4.5_p2012[pam] )
cracklib? ( >=sys-libs/pam-${MIN_PAM_REQ}[cracklib] )
gnome-keyring? ( >=gnome-base/gnome-keyring-2.32[pam] )
mktemp? ( sys-auth/pam_mktemp )
pam_krb5? (
|| ( >=sys-libs/pam-${MIN_PAM_REQ} sys-auth/openpam )
>=sys-auth/pam_krb5-4.3
)
pam_ssh? ( sys-auth/pam_ssh )
passwdqc? ( >=sys-auth/pam_passwdqc-1.0.4 )
selinux? ( >=sys-libs/pam-${MIN_PAM_REQ}[selinux] )
sha512? ( >=sys-libs/pam-${MIN_PAM_REQ} )
systemd? ( >=sys-apps/systemd-44-r1[pam] )
!<sys-apps/shadow-4.1.5-r1
!<sys-freebsd/freebsd-pam-modules-6.2-r1
!<sys-libs/pam-0.99.9.0-r1"
DEPEND="app-portage/portage-utils"
src_prepare() {
epatch "${FILESDIR}"/${P}-systemd.patch
epatch "${FILESDIR}"/${P}-lastlog-silent.patch
epatch "${FILESDIR}"/${P}-systemd-auth.patch # 485470
if ! use arm64; then
epatch "${FILESDIR}"/${P}-sssd.patch
fi
}
src_compile() {
local implementation=
local linux_pam_version=
if has_version sys-libs/pam; then
implementation=linux-pam
local ver_str=$(qatom `best_version sys-libs/pam` | cut -d ' ' -f 3)
linux_pam_version=$(printf "0x%02x%02x%02x" ${ver_str//\./ })
elif has_version sys-auth/openpam; then
implementation=openpam
else
die "PAM implementation not identified"
fi
use_var() {
local varname=$(echo $1 | tr [a-z] [A-Z])
local usename=${2-$(echo $1 | tr [A-Z] [a-z])}
local varvalue=$(usex $usename)
echo "${varname}=${varvalue}"
}
emake \
GIT=true \
$(use_var debug) \
$(use_var cracklib) \
$(use_var passwdqc) \
$(use_var consolekit) \
$(use_var systemd) \
$(use_var GNOME_KEYRING gnome-keyring) \
$(use_var selinux) \
$(use_var mktemp) \
$(use_var PAM_SSH pam_ssh) \
$(use_var sha512) \
$(use_var KRB5 pam_krb5) \
$(use_var minimal) \
IMPLEMENTATION=${implementation} \
LINUX_PAM_VERSION=${linux_pam_version}
}
src_test() { :; }
src_install() {
emake GIT=true DESTDIR="${ED}" install
}
pkg_postinst() {
if use sha512; then
elog "Starting from version 20080801, pambase optionally enables"
elog "SHA512-hashed passwords. For this to work, you need sys-libs/pam-1.0.1"
elog "built against sys-libs/glibc-2.7 or later."
elog "If you don't have support for this, it will automatically fallback"
elog "to MD5-hashed passwords, just like before."
elog
elog "Please note that the change only affects the newly-changed passwords"
elog "and that SHA512-hashed passwords will not work on earlier versions"
elog "of glibc or Linux-PAM."
fi
if use systemd && use consolekit; then
ewarn "You are enabling 2 session trackers, ConsoleKit and systemd-logind"
ewarn "at the same time. This is not recommended setup to have, please"
ewarn "consider disabling either USE=\"consolekit\" or USE=\"systemd\."
fi
}