From saurbier@math.uni-bielefeld.de  Mon Aug 29 11:50:42 2005
Return-Path: <saurbier@math.uni-bielefeld.de>
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 332BF16A41F
	for <FreeBSD-gnats-submit@freebsd.org>; Mon, 29 Aug 2005 11:50:42 +0000 (GMT)
	(envelope-from saurbier@math.uni-bielefeld.de)
Received: from mail1.math.uni-bielefeld.de (mail1.math.uni-bielefeld.de [129.70.14.32])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 7D69743D6E
	for <FreeBSD-gnats-submit@freebsd.org>; Mon, 29 Aug 2005 11:50:35 +0000 (GMT)
	(envelope-from saurbier@math.uni-bielefeld.de)
Received: from math.uni-bielefeld.de (fuji11.math.uni-bielefeld.de [129.70.15.131])
	by mail1.math.uni-bielefeld.de (Postfix) with SMTP id DC9E695823;
	Mon, 29 Aug 2005 13:50:34 +0200 (CEST)
Received: (nullmailer pid 7822 invoked by uid 4079);
	Mon, 29 Aug 2005 11:50:34 -0000
Message-Id: <20050829115034.GA7585@math.uni-bielefeld.de>
Date: Mon, 29 Aug 2005 13:50:34 +0200
From: Konstantin Saurbier <saurbier@math.uni-bielefeld.de>
To: FreeBSD-gnats-submit@freebsd.org
Subject: [patch] update security/pam_ldap to 1.8.0

>Number:         85435
>Category:       ports
>Synopsis:       [patch] update security/pam_ldap to 1.8.0
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    marcus
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          update
>Submitter-Id:   current-users
>Arrival-Date:   Mon Aug 29 12:00:35 GMT 2005
>Closed-Date:    Fri Sep 02 04:56:50 GMT 2005
>Last-Modified:  Fri Sep 02 04:56:50 GMT 2005
>Originator:     Konstantin Saurbier
>Release:        FreeBSD 5.4-RELEASE-p1 amd64
>Organization:
Department of Mathematics, University of Bielefeld
>Environment:
System: FreeBSD mail1.math.uni-bielefeld.de 5.4-RELEASE-p1 FreeBSD 5.4-RELE=
ASE-p1 #5: Sun Jul 3 14:27:41 CEST 2005 root@mail1.math.uni-bielefeld.de:/u=
sr/obj/usr/src/sys/SERVER amd64
>Description:
	pam_ldap 1.7.8 has minor bug, this bug is fixed in version 1.8.0.
	http://www.kb.cert.org/vuls/id/778916
	I also included a fix for pkg-message to echo correct=20
	instructions for pam on 5.4.
>How-To-Repeat:
>Fix:
--- pam_ldap.patch begins here ---
--- Makefile.orig	Fri Aug 26 15:11:00 2005
+++ Makefile	Fri Aug 26 14:34:44 2005
@@ -6,7 +6,7 @@
 #
=20
 PORTNAME=3D	pam_ldap
-PORTVERSION=3D	1.7.8
+PORTVERSION=3D	1.8.0
 CATEGORIES=3D	security net
 MASTER_SITES=3D	http://www.padl.com/download/ \
 		ftp://ftp.padl.com/pub/

--- distinfo.orig	Fri Aug 26 15:12:21 2005
+++ distinfo	Fri Aug 26 14:37:07 2005
@@ -1,2 +1,2 @@
-MD5 (pam_ldap-178.tar.gz) =3D 222186c498d24a7035e8a7494fc0797d
-SIZE (pam_ldap-178.tar.gz) =3D 127074
+MD5 (pam_ldap-180.tar.gz) =3D 627f053fdffb8267ba73261394e0ecde
+SIZE (pam_ldap-180.tar.gz) =3D 127337

--- files/patch-aa.orig	Fri Aug 26 15:11:31 2005
+++ files/patch-aa	Fri Aug 26 15:07:45 2005
@@ -1,6 +1,6 @@
---- Makefile.in.orig	Sun Jun 26 13:33:47 2005
-+++ Makefile.in	Sun Jun 26 13:35:09 2005
-@@ -434,19 +434,15 @@
+--- Makefile.in.orig	Fri Aug 26 14:56:39 2005
++++ Makefile.in	Fri Aug 26 15:07:13 2005
+@@ -434,17 +434,13 @@
 =20
  install-exec-local: pam_ldap.so
  	@$(NORMAL_INSTALL)
@@ -17,10 +17,7 @@
 +	@if test ! -f $(DESTDIR)$(sysconfdir)/ldap.conf.dist; then \
  		$(mkinstalldirs) $(DESTDIR)$(sysconfdir); \
 -		$(INSTALL_DATA) -o root -g root $(srcdir)/ldap.conf $(DESTDIR)$(sysconf=
dir)/ldap.conf; \
-+	$(INSTALL_DATA) -o root -g wheel $(srcdir)/ldap.conf $(DESTDIR)$(sysconf=
dir)/ldap.conf.dist; \
++		$(INSTALL_DATA) -o root -g wheel $(srcdir)/ldap.conf $(DESTDIR)$(syscon=
fdir)/ldap.conf.dist; \
  	fi
--	$(INSTALL_DATA) -o root -g root $(srcdir)/pam_ldap.5 $(DESTDIR)$(mandir)=
/man5/pam_ldap.5
-+	$(INSTALL_DATA) -o root -g wheel $(srcdir)/pam_ldap.5 $(DESTDIR)$(mandir=
)/man5/pam_ldap.5
 =20
  uninstall-local:
- 	@$(NORMAL_UNINSTALL)

--- pkg-message.orig	Fri Aug 26 15:26:45 2005
+++ pkg-message	Fri Aug 26 15:47:47 2005
@@ -1,8 +1,15 @@
 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D
 Copy %%PREFIX%%/etc/ldap.conf.dist to %%PREFIX%%/etc/ldap.conf, then edit
-%%PREFIX%%/etc/ldap.conf in order to use this module.  Add a line similar =
to
-the following to /etc/pam.conf on 4.X, or create an /etc/pam.d/ldap
-on 5.X with a line similar to the following:
+%%PREFIX%%/etc/ldap.conf in order to use this module.
+Add a line similar to the following to /etc/pam.conf on 4.X:
=20
 login	auth	sufficient	%%PREFIX%%/lib/pam_ldap.so
+
+
+On 5.X insert the following on the appropiate lines in /etc/pam.d/system or
+/etc/pam.d/<service-name>:
+
+auth		sufficient	pam_ldap.so no_warn try_first_pass
+account		required	pam_ldap.so ignore_unknown_user ignore_authinfo_unavail
+session		optional	pam_ldap.so
 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D
--- pam_ldap.patch ends here ---
>Release-Note:
>Audit-Trail:
Responsible-Changed-From-To: freebsd-ports-bugs->marcus 
Responsible-Changed-By: linimon 
Responsible-Changed-When: Tue Aug 30 06:14:21 GMT 2005 
Responsible-Changed-Why:  
Over to maintainer. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=85435 
State-Changed-From-To: open->closed 
State-Changed-By: marcus 
State-Changed-When: Fri Sep 2 04:56:14 GMT 2005 
State-Changed-Why:  
The port was already updated during the freeze. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=85435 
>Unformatted:
