]> eyrie.org Git - kerberos/krb5-strength.git/commitdiff
Update upstream source from tag 'upstream/3.2'
authorRuss Allbery <eagle@eyrie.org>
Sun, 17 May 2020 05:59:06 +0000 (22:59 -0700)
committerRuss Allbery <eagle@eyrie.org>
Sun, 17 May 2020 05:59:06 +0000 (22:59 -0700)
Update to upstream version '3.2'
with Debian dir 92fce2bd9ce55374a796c11c40b6f6e214b63388

14 files changed:
debian/changelog [new file with mode: 0644]
debian/compat [new file with mode: 0644]
debian/control [new file with mode: 0644]
debian/copyright [new file with mode: 0644]
debian/docs [new file with mode: 0644]
debian/gbp.conf [new file with mode: 0644]
debian/patches/0001-Change-CrackLib-tests-for-system-CrackLib.patch [new file with mode: 0644]
debian/patches/series [new file with mode: 0644]
debian/postinst [new file with mode: 0755]
debian/postrm [new file with mode: 0755]
debian/rules [new file with mode: 0755]
debian/source/format [new file with mode: 0644]
debian/upstream/signing-key.asc [new file with mode: 0644]
debian/watch [new file with mode: 0644]

diff --git a/debian/changelog b/debian/changelog
new file mode 100644 (file)
index 0000000..a397372
--- /dev/null
@@ -0,0 +1,196 @@
+krb5-strength (3.1-2) unstable; urgency=medium
+
+  * Update standards version to 4.2.1.
+    - Enable verbose test output.
+    - Install the upstream release notes as NEWS.gz, not changelog.gz.
+    - Add Rules-Requires-Root: no.
+    - Use https for URLs in debian/copyright.
+    - Change priority to optional.
+  * Update to debhelper compatibility levl V11.
+  * Bump debian/watch version to 4 and use https.
+  * Add upstream-vcs-tag configuration to debian/gbp.conf.
+  * Remove obsolete debian/source/options that was forcing the compression
+    format to xz (now the default).
+  * Refresh upstream signing key.
+
+ -- Russ Allbery <rra@debian.org>  Fri, 31 Aug 2018 17:07:43 -0700
+
+krb5-strength (3.1-1) unstable; urgency=medium
+
+  * New upstream release.
+    - New configuration option cracklib_maxlen.
+    - require_classes now supports requiring a minimum number of classes.
+    - Capitalize the first letter of error messages.
+    - Apply SuSE patch for a security vulnerability in the embedded
+      CrackLib.  This didn't affect the way it was used in this package,
+      but best to be sure anyway.
+    - Configuration instructions are now provided in installed man pages,
+      including a new krb5-strength man page, to make them more accessible
+      after installation.
+  * Patch the upstream test suite to change the expected results for a few
+    passwords that are rejected by the embedded CrackLib but accepted by
+    the system CrackLib (which the Debian package is built with).
+  * Re-enable treating test suite failures as package build failures now
+    that bug #724570 in CrackLib was fixed in Debian.
+  * Switch to the DEP-14 branch layout and update debian/gbp.conf and
+    Vcs-Git accordingly.
+  * Prefer *.tar.xz in debian/watch to match packaging.
+  * Fix Upstream-Contact email address in debian/copyright.
+  * Switch to https for all package URLs.
+  * Run wrap-and-sort -ast.
+  * Refresh upstream signing key.
+  * Enable all hardening flags.
+  * Update to debhelper compatibility level V10.
+    - Remove explicit dh-autoreconf dependency and invocation.
+    - Remove explicit --parallel flags.
+  * Update standards version to 3.9.8 (no changes required).
+
+ -- Russ Allbery <rra@debian.org>  Sun, 25 Dec 2016 12:40:41 -0800
+
+krb5-strength (3.0-1) unstable; urgency=medium
+
+  * New upstream release.
+    - SQLite password dictionaries are now supported and can be used to
+      reject passwords within edit distance one of any dictionary word.
+    - cdbmake-wordlist has been renamed to krb5-strength-wordlist and can
+      also generate SQLite databases compatible with this plugin and
+      Heimdal quality check program.
+    - heimdal-history, a password history implementation for Heimdal, has
+      been added and can be stacked with heimdal-strength to check both
+      history and password strength.
+    - New configuration option, minimum_different, which sets the minimum
+      number of different characters required in a password.
+  * Add the upstream signing key to debian/upstream/signing-key.asc and
+    configure uscan to do signature validation.  Configure uscan to
+    download the xz tarball instead of the gz tarball.
+  * Create a _history user and group and a /var/lib/heimdal-history
+    directory on package installation for the use of heimdal-history,
+    remove the user and the standard database on purge, and remove the
+    directory if empty on package purge or removal.
+
+ -- Russ Allbery <rra@debian.org>  Wed, 26 Mar 2014 00:04:13 -0700
+
+krb5-strength (2.2-1) unstable; urgency=low
+
+  * New upstream release.
+    - Support for more complex length-sensitive character class
+      restrictions using the new require_classes configuration setting.
+    - cdbmake-wordlist now supports filtering out words based on maximum
+      length and user-supplied regular expressions, and supports running
+      in filter mode to generate a new word list.
+  * Update to standards version 3.9.5 (no changes required).
+
+ -- Russ Allbery <rra@debian.org>  Mon, 16 Dec 2013 15:36:29 -0800
+
+krb5-strength (2.1-1) unstable; urgency=low
+
+  * New upstream release.
+    - Improve some of the password rejection error messages.
+
+ -- Russ Allbery <rra@debian.org>  Thu, 10 Oct 2013 17:09:37 -0700
+
+krb5-strength (2.0-1) unstable; urgency=low
+
+  * Initial upload to Debian.  (Closes: #725753)
+  * New upstream release.
+    - Add native support for the MIT Kerberos password quality plugin
+      interface included in MIT Kerberos 1.9 and later.
+    - Stop building the Heimdal plugin.  Heimdal prefers using an external
+      check program anyway.
+    - Add support for TinyCDB dictionaries with a simpler dictionary
+      lookup algorithm.  This allows use of this package to check
+      passwords against a large, fast dictionary with a minimum of
+      permutations as an alternative or supplement to the extensive
+      permutations tested by CrackLib.
+    - Minimum password length can now be enforced directly through
+      configuration of this module without relying on CrackLib.
+    - New boolean settings require_ascii_printable and require_non_letter
+      to reject passwords with non-ASCII or non-printable characters and
+      to require passwords contain at least one non-letter (and
+      non-space).
+    - The plugin and external checking program will now run without a
+      dictionary configured so that they can be used only to check length
+      and the lighter character restrictions if so desired.
+    - When checking for passwords based on the principal, also check each
+      component of the principal to find passwords based on the realm.
+  * Eliminate the heimdal-strength package.  krb5-strength now builds a
+    single binary package of the same name including the MIT plugin and
+    the Heimdal external password quality program.  The Heimdal plugin is
+    not built by the Debian packaging because Heimdal prefers external
+    programs.  The plugin can be added later as a separate package if
+    there is demand.
+  * Revise the package long description for the merger of krb5-strength
+    and heimdal-strength and the new capabilities in 2.0.
+  * Recommend cracklib-runtime and tinycdb since they are required to
+    build dictionaries.  Downgrade krb5-admin-server to Enhances and add
+    heimdal-kdc.
+  * Update debhelper compatibility level to V9.
+    - Enable hardening flags, including bindnow and PIE.
+    - Enable parallel builds.
+  * Use dh-autoreconf to rebuild the build system during package builds.
+  * Use xz compression for the upstream and Debian tarballs.
+  * Add branch information to the Vcs-Git metadata.
+  * Update standards version to 3.9.4 (no changes required).
+  * Rewrite debian/copyright in copyright-format 1.0.
+  * Remove README.Debian.  All of that information is now available in the
+    installed upstream README file.
+  * Remove Bugs header now that this package is in Debian proper.
+
+ -- Russ Allbery <rra@debian.org>  Mon, 07 Oct 2013 18:56:49 -0700
+
+krb5-strength (1.1-1) unstable; urgency=low
+
+  * New upstream release.
+    - Increase minimum password length to 8.
+    - Reject passwords formed from the username with digits appended.
+    - Reject duplicated dictionary words.
+    - Fix variable sizes on 64-bit platforms.
+  * Add a Bugs header directing bug reports to me personally.
+  * Update to debhelper compatibility level V8.
+  * Switch to Debian source package format 3.0 (quilt) with a custom local
+    patch header.
+  * Update standards version to 3.9.3 (no changes required).
+
+ -- Russ Allbery <rra@debian.org>  Fri, 11 May 2012 15:03:11 -0700
+
+krb5-strength (1.0-1) unstable; urgency=low
+
+  * New upstream release.
+    - Add an external password strength program for Heimdal.
+    - Add a plugin for the Heimdal password strength support.
+  * Create a separate heimdal-strength package containing only the
+    external password check program for Heimdal.  The Heimdal version of
+    the libkadm5srv plugin isn't packaged for the time being.
+  * Update debhelper compatibility mode to V7.
+    - Use debhelper rule minimization with overrides.
+    - Add ${misc:Depends} to dependencies.
+  * Add Homepage, Vcs-Git, and Vcs-Browser control fields.
+  * Add a watch file.
+  * Update standards version to 3.8.4 (no changes required).
+
+ -- Russ Allbery <rra@debian.org>  Tue, 16 Feb 2010 22:47:35 -0800
+
+krb5-strength (0.5-1) unstable; urgency=low
+
+  * New upstream release.
+    - More checks for passwords based on the principal.
+
+ -- Russ Allbery <rra@debian.org>  Wed, 18 Jul 2007 23:16:37 -0700
+
+krb5-strength (0.3-1) unstable; urgency=low
+
+  * New upstream release with a different name.
+    - Many cleanups to the code and build system.
+    - Unnecessary differences from CrackLib removed.
+    - Some Debian CrackLib patches applied for robustness.
+  * Updated README.Debian with a better example kdc.conf entry.
+  * No longer install the packer binary.  We can use the one from
+    cracklib-runtime.
+
+ -- Russ Allbery <rra@debian.org>  Fri, 23 Mar 2007 15:27:50 -0700
+
+krb5-passwd-strength (0.2-1) unstable; urgency=low
+
+  * Initial release.
+
+ -- Russ Allbery <rra@debian.org>  Thu, 22 Jun 2006 15:07:03 -0700
diff --git a/debian/compat b/debian/compat
new file mode 100644 (file)
index 0000000..b4de394
--- /dev/null
@@ -0,0 +1 @@
+11
diff --git a/debian/control b/debian/control
new file mode 100644 (file)
index 0000000..987700d
--- /dev/null
@@ -0,0 +1,73 @@
+Source: krb5-strength
+Section: net
+Priority: optional
+Maintainer: Russ Allbery <rra@debian.org>
+Build-Depends:
+ cracklib-runtime,
+ debhelper (>= 11),
+ libcdb-dev,
+ libcrack2-dev,
+ libcrypt-pbkdf2-perl,
+ libdb-file-lock-perl,
+ libdbd-sqlite3-perl,
+ libdbi-perl,
+ libfile-slurp-perl,
+ libgetopt-long-descriptive-perl,
+ libipc-run-perl,
+ libjson-perl,
+ libkrb5-dev (>= 1.9),
+ libperl6-slurp-perl,
+ libreadonly-perl,
+ libsqlite3-dev,
+ libtest-minimumversion-perl,
+ libtest-pod-perl,
+ libtest-strict-perl,
+ perl,
+ pkg-config,
+ tinycdb,
+Rules-Requires-Root: no
+Standards-Version: 4.2.1
+Homepage: https://www.eyrie.org/~eagle/software/krb5-strength/
+Vcs-Git: https://git.eyrie.org/git/kerberos/krb5-strength.git -b debian/master
+Vcs-Browser: https://git.eyrie.org/?p=kerberos/krb5-strength.git
+
+Package: krb5-strength
+Architecture: any
+Pre-Depends:
+ ${misc:Pre-Depends},
+Depends:
+ adduser,
+ ${misc:Depends},
+ ${perl:Depends},
+ ${shlibs:Depends},
+Recommends:
+ cracklib-runtime,
+ libcrypt-pbkdf2-perl,
+ libdb-file-lock-perl,
+ libdbd-sqlite3-perl,
+ libdbi-perl,
+ libgetopt-long-descriptive-perl,
+ libipc-run-perl,
+ libjson-perl,
+ libreadonly-perl,
+ tinycdb,
+Enhances:
+ heimdal-kdc,
+ krb5-admin-server,
+Description: Password strength checking for Kerberos KDCs
+ krb5-strength provides a password quality plugin for the MIT Kerberos KDC
+ (specifically the kadmind server), an external password quality program
+ for use with Heimdal, and a per-principal password history implementation
+ for Heimdal.  Passwords can be tested with CrackLib, checked against a
+ CDB or SQLite database of known weak passwords with some transformations,
+ checked for length, checked for non-printable or non-ASCII characters
+ that may be difficult to enter reproducibly, required to contain
+ particular character classes, or any combination of these tests.
+ .
+ No dictionary is shipped with this package.  A CrackLib dictionary can be
+ created with the tools in cracklib-runtime, a CDB or SQLite database can
+ be created from a password list (obtained separately) using the tools
+ included in this package, or both.
+ .
+ The recommended packages are needed to generate CDB or SQLite databases
+ and for the password history implementation for Heimdal.
diff --git a/debian/copyright b/debian/copyright
new file mode 100644 (file)
index 0000000..07ffd81
--- /dev/null
@@ -0,0 +1,295 @@
+Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
+Upstream-Contact: Russ Allbery <eagle@eyrie.org>
+Source: https://www.eyrie.org/~eagle/software/krb5-strength/
+Copyright: 2006-2007, 2009-2013
+    The Board of Trustees of the Leland Stanford Junior University
+  2016 Russ Allbery <eagle@eyrie.org>
+License: Expat
+
+Files: *
+Copyright: 1993 Alec Muffett
+  2000-2002, 2004-2016 Russ Allbery <eagle@eyrie.org>
+  2001-2002, 2004-2014
+    The Board of Trustees of the Leland Stanford Junior University
+  2010 the Massachusetts Institute of Technology
+License: Expat
+
+Files: Makefile.in
+Copyright: 1994-2014 Free Software Foundation, Inc.
+  2007, 2009-2010, 2012-2014
+    The Board of Trustees of the Leland Stanford Junior University
+  2016 Russ Allbery <eagle@eyrie.org>
+License: FSF-unlimited and Expat
+
+Files: aclocal.m4
+Copyright: 1996-2016 Free Software Foundation, Inc.
+  2004 Scott James Remnant <scott@netsplit.com>
+  2012-2015 Dan Nicholson <dbn.lists@gmail.com>
+License: FSF-unlimited, and GPL-2+ with Autoconf exception or Expat
+
+Files: build-aux/ar-lib build-aux/compile build-aux/depcomp
+ build-aux/missing
+Copyright: 1996-2014 Free Software Foundation, Inc.
+License: GPL-2+ with Autoconf exception or Expat
+
+Files: build-aux/config.guess build-aux/config.sub
+Copyright: 1992-2016 Free Software Foundation, Inc.
+License: GPL-3+ with Autoconf exception or Expat
+
+Files: build-aux/install-sh
+Copyright: 1994 X Consortium
+License: X11
+ Permission is hereby granted, free of charge, to any person obtaining a
+ copy of this software and associated documentation files (the
+ "Software"), to deal in the Software without restriction, including
+ without limitation the rights to use, copy, modify, merge, publish,
+ distribute, sublicense, and/or sell copies of the Software, and to permit
+ persons to whom the Software is furnished to do so, subject to the
+ following conditions:
+ .
+ The above copyright notice and this permission notice shall be included
+ in all copies or substantial portions of the Software.
+ .
+ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
+ OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+ MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+ IN NO EVENT SHALL THE X CONSORTIUM BE LIABLE FOR ANY CLAIM, DAMAGES OR
+ OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
+ ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
+ OTHER DEALINGS IN THE SOFTWARE.
+ .
+ Except as contained in this notice, the name of the X Consortium shall
+ not be used in advertising or otherwise to promote the sale, use or other
+ dealings in this Software without prior written authorization from the X
+ Consortium.
+
+Files: build-aux/ltmain.sh
+Copyright: 1996-2015 Free Software Foundation, Inc.
+License: GPL-2+ with Libtool exception or Expat, and GPL-3+ with Libtool exception or Expat, and GPL-3+
+
+Files: configure
+Copyright: 1992-1996, 1998-2012, 2014 Free Software Foundation, Inc.
+License: FSF-configure, and GPL-2+ with Libtool exception or Expat
+
+Files: cracklib/*
+Copyright: 1993 Alec Muffett
+License: Artistic
+ The author disclaims all responsibility or liability with respect to it's
+ usage or its effect upon hardware or computer systems, and maintains
+ copyright as set out in the "LICENCE" document which accompanies
+ distributions of Crack v4.0 and upwards.
+ .
+ See cracklib/LICENCE for the full licensing terms.
+Comment: You can find the Artistic License in
+ /usr/share/common-licenses/Artistic on Debian systems.
+
+Files: docs/krb5-strength.5.in docs/krb5-strength.pod tests/README
+ tools/heimdal-strength.1 tools/heimdal-strength.pod
+Copyright: 2006-2007, 2009-2010, 2012-2014
+    The Board of Trustees of the Leland Stanford Junior University
+  2010, 2016 Russ Allbery <eagle@eyrie.org>
+License: all-permissive
+ Copying and distribution of this file, with or without modification, are
+ permitted in any medium without royalty provided the copyright notice and
+ this notice are preserved.  This file is offered as-is, without any
+ warranty.
+
+Files: m4/cc-flags.m4 util/messages.c util/messages.h util/xmalloc.c
+ util/xmalloc.h
+Copyright: 1991, 1994-2003 The Internet Software Consortium and Rich Salz
+  2004-2006, 2009, 2016 Internet Systems Consortium, Inc.
+  2008-2010, 2012-2014
+    The Board of Trustees of the Leland Stanford Junior University
+  2015-2016 Russ Allbery <eagle@eyrie.org>
+License: ISC
+ Permission to use, copy, modify, and distribute this software for any
+ purpose with or without fee is hereby granted, provided that the above
+ copyright notice and this permission notice appear in all copies.
+ .
+ THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
+ REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ MERCHANTABILITY AND FITNESS.  IN NO EVENT SHALL ISC BE LIABLE FOR ANY
+ SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+Files: m4/clang.m4 m4/cracklib.m4 m4/krb5-config.m4 m4/krb5.m4
+ m4/lib-depends.m4 m4/lib-helper.m4 m4/lib-pathname.m4 m4/snprintf.m4
+ m4/sqlite.m4 m4/tinycdb.m4 m4/vamacros.m4
+Copyright: 2005-2014
+    The Board of Trustees of the Leland Stanford Junior University
+  2015 Russ Allbery <eagle@eyrie.org>
+License: unlimited
+ This file is free software; the authors give unlimited permission to copy
+ and/or distribute it, with or without modifications, as long as this
+ notice is preserved.
+
+Files: m4/libtool.m4
+Copyright: 1996-2001, 2003-2015 Free Software Foundation, Inc.
+License: FSF-unlimited, and GPL-2+ with Libtool exception or Expat
+
+Files: m4/ltoptions.m4 m4/ltsugar.m4 m4/ltversion.m4 m4/lt~obsolete.m4
+Copyright: 2004-2005, 2007-2009, 2011-2015 Free Software Foundation, Inc.
+License: FSF-unlimited
+
+Files: portable/asprintf.c portable/dummy.c portable/kadmin.h
+ portable/krb5-extra.c portable/krb5.h portable/macros.h portable/mkstemp.c
+ portable/reallocarray.c portable/stdbool.h portable/strndup.c
+ portable/system.h tests/portable/asprintf-t.c tests/portable/mkstemp-t.c
+ tests/portable/reallocarray-t.c tests/portable/strndup-t.c util/macros.h
+Copyright: no copyright notice, see License below
+License: rra-public-domain
+ The authors hereby relinquish any claim to any copyright that they may
+ have in this work, whether granted under contract or by operation of law
+ or international treaty, and hereby commit to the public, at large, that
+ they shall not, at any time in the future, seek to enforce any copyright
+ in this work against any person or entity, or prevent any person or
+ entity from copying, publishing, distributing or creating derivative
+ works of this work.
+
+Files: portable/snprintf.c tests/portable/snprintf-t.c
+Copyright: 1995 Patrick Powell
+  2000-2006 Russ Allbery <eagle@eyrie.org>
+  2001 Hrvoje Niksic
+  2009-2010 The Board of Trustees of the Leland Stanford Junior University
+License: Powell-snprintf
+ This code is based on code written by Patrick Powell (papowell@astart.com)
+ It may be used for any purpose as long as this notice remains intact
+ on all source code distributions
+
+License: Expat
+ Permission is hereby granted, free of charge, to any person obtaining a
+ copy of this software and associated documentation files (the
+ "Software"), to deal in the Software without restriction, including
+ without limitation the rights to use, copy, modify, merge, publish,
+ distribute, sublicense, and/or sell copies of the Software, and to permit
+ persons to whom the Software is furnished to do so, subject to the
+ following conditions:
+ .
+ The above copyright notice and this permission notice shall be included
+ in all copies or substantial portions of the Software.
+ .
+ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
+ OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+ MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+ IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
+ CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT
+ OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR
+ THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+License: FSF-configure
+ This script is free software; the Free Software Foundation gives unlimited
+ permission to copy, distribute and modify it.
+
+License: FSF-unlimited
+ This file is free software; the Free Software Foundation gives unlimited
+ permission to copy and/or distribute it, with or without modifications, as
+ long as this notice is preserved.
+ .
+ This program is distributed in the hope that it will be useful, but
+ WITHOUT ANY WARRANTY, to the extent permitted by law; without even the
+ implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+
+License: GPL-2+ with Autoconf exception
+ This file is free software; you can redistribute it and/or modify it
+ under the terms of the GNU General Public License as published by the
+ Free Software Foundation; either version 2 of the License, or (at your
+ option) any later version.
+ .
+ This program is distributed in the hope that it will be useful, but
+ WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General
+ Public License for more details.
+ .
+ You should have received a copy of the GNU General Public License along
+ with this program.  If not, see <https://www.gnu.org/licenses/>.
+ .
+ As a special exception to the GNU General Public License, if you
+ distribute this file as part of a program that contains a configuration
+ script generated by Autoconf, you may include it under the same
+ distribution terms that you use for the rest of that program.
+Comment: The option described in the license has been accepted and these
+ files are distributed under the same terms as the package as a whole, as
+ described at the top of this file.  You can find the GPL version 2 in
+ /usr/share/common-licenses/GPL-2 on Debian systems.
+
+License: GPL-2+ with Libtool exception
+ This file is part of GNU Libtool.
+ .
+ GNU Libtool is free software; you can redistribute it and/or modify it
+ under the terms of the GNU General Public License as published by the
+ Free Software Foundation; either version 2 of the License, or (at your
+ option) any later version.
+ .
+ As a special exception to the GNU General Public License, if you
+ distribute this file as part of a program or library that is built using
+ GNU Libtool, you may include this file under the same distribution terms
+ that you use for the rest of that program.
+ .
+ GNU Libtool is distributed in the hope that it will be useful, but
+ WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General
+ Public License for more details.
+Comment: The option described in the license has been accepted and these
+ files are distributed under the same terms as the package as a whole, as
+ described at the top of this file.  You can find the GPL version 2 in
+ /usr/share/common-licenses/GPL-2 on Debian systems.
+
+License: GPL-3+
+ This program is free software: you can redistribute it and/or modify
+ it under the terms of the GNU General Public License as published by
+ the Free Software Foundation, either version 3 of the License, or
+ (at your option) any later version.
+ .
+ This program is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ GNU General Public License for more details.
+Comment: You can find the GPL version 3 in /usr/share/common-licenses/GPL-3
+ on Debian systems.
+
+License: GPL-3+ with Autoconf exception
+ This file is free software; you can redistribute it and/or modify it
+ under the terms of the GNU General Public License as published by the
+ Free Software Foundation; either version 3 of the License, or (at your
+ option) any later version.
+ .
+ This program is distributed in the hope that it will be useful, but
+ WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General
+ Public License for more details.
+ .
+ You should have received a copy of the GNU General Public License along
+ with this program; if not, see <https://www.gnu.org/licenses/>.
+ .
+ As a special exception to the GNU General Public License, if you
+ distribute this file as part of a program that contains a configuration
+ script generated by Autoconf, you may include it under the same
+ distribution terms that you use for the rest of that program.  This
+ Exception is an additional permission under section 7 of the GNU General
+ Public License, version 3 ("GPLv3").
+Comment: The option described in the license has been accepted and these
+ files are distributed under the same terms as the package as a whole, as
+ described at the top of this file.  You can find the GPL version 3 in
+ /usr/share/common-licenses/GPL-3 on Debian systems.
+
+License: GPL-3+ with Libtool exception
+ GNU Libtool is free software; you can redistribute it and/or modify
+ it under the terms of the GNU General Public License as published by
+ the Free Software Foundation; either version 3 of the License, or
+ (at your option) any later version.
+ .
+ As a special exception to the GNU General Public License, if you
+ distribute this file as part of a program or library that is built
+ using GNU Libtool, you may include this file under the same
+ distribution terms that you use for the rest of that program.
+ .
+ GNU Libtool is distributed in the hope that it will be useful, but
+ WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ GNU General Public License for more details.
+Comment: The option described in the license has been accepted and these
+ files are distributed under the same terms as the package as a whole, as
+ described at the top of this file.  You can find the GPL version 3 in
+ /usr/share/common-licenses/GPL-3 on Debian systems.
diff --git a/debian/docs b/debian/docs
new file mode 100644 (file)
index 0000000..5502ed8
--- /dev/null
@@ -0,0 +1,3 @@
+NEWS
+README
+TODO
diff --git a/debian/gbp.conf b/debian/gbp.conf
new file mode 100644 (file)
index 0000000..6c0b02b
--- /dev/null
@@ -0,0 +1,10 @@
+# The Git repository referenced by the Vcs-Git field of debian/control
+# combines upstream development (in master) with the Debian packaging (in the
+# debian/* branches).  Tell git-buildpackage about this layout.
+
+[DEFAULT]
+debian-branch = debian/master
+upstream-branch = upstream/latest
+
+[import-orig]
+upstream-vcs-tag = release/%(version)s
diff --git a/debian/patches/0001-Change-CrackLib-tests-for-system-CrackLib.patch b/debian/patches/0001-Change-CrackLib-tests-for-system-CrackLib.patch
new file mode 100644 (file)
index 0000000..6df3039
--- /dev/null
@@ -0,0 +1,66 @@
+From: Russ Allbery <eagle@eyrie.org>
+Date: Sun, 25 Dec 2016 11:50:14 -0800
+Subject: Change CrackLib tests for system CrackLib
+
+The upstream test suite contains a few tests that fail with the
+normal system CrackLib rules.  Modify them to expect passes so
+that we can run the full test suite during the build.
+
+Also remove CrackLib when testing character classes, since it
+rejects the passwords used for minimum_different testing as too
+simplistic.
+---
+ tests/data/passwords/cracklib.json |  8 ++------
+ tests/plugin/mit-t.c               | 12 ++++++------
+ 2 files changed, 8 insertions(+), 12 deletions(-)
+
+diff --git a/tests/data/passwords/cracklib.json b/tests/data/passwords/cracklib.json
+index 037a70f..b69e700 100644
+--- a/tests/data/passwords/cracklib.json
++++ b/tests/data/passwords/cracklib.json
+@@ -22,9 +22,7 @@
+     {
+         "name": "in dictionary (repeated)",
+         "principal": "test@EXAMPLE.ORG",
+-        "password": "stanfordstanford",
+-        "code": "KADM5_PASS_Q_GENERIC",
+-        "error": "it is based on a (duplicated) dictionary word"
++        "password": "stanfordstanford"
+     },
+     {
+         "name": "in dictionary (reversed)",
+@@ -36,9 +34,7 @@
+     {
+         "name": "seven characters",
+         "principal": "test@EXAMPLE.ORG",
+-        "password": "dfareas",
+-        "code": "KADM5_PASS_Q_GENERIC",
+-        "error": "it is too short"
++        "password": "dfareas"
+     },
+     {
+         "name": "four characters",
+diff --git a/tests/plugin/mit-t.c b/tests/plugin/mit-t.c
+index 7eba594..4406e38 100644
+--- a/tests/plugin/mit-t.c
++++ b/tests/plugin/mit-t.c
+@@ -272,13 +272,13 @@ main(void)
+     vtable->close(ctx, data);
+     /* Add simple character class configuration to krb5.conf. */
+-    setup_argv[5] = (char *) "minimum_different";
+-    setup_argv[6] = (char *) "8";
+-    setup_argv[7] = (char *) "require_ascii_printable";
++    setup_argv[3] = (char *) "minimum_different";
++    setup_argv[4] = (char *) "8";
++    setup_argv[5] = (char *) "require_ascii_printable";
++    setup_argv[6] = (char *) "true";
++    setup_argv[7] = (char *) "require_non_letter";
+     setup_argv[8] = (char *) "true";
+-    setup_argv[9] = (char *) "require_non_letter";
+-    setup_argv[10] = (char *) "true";
+-    setup_argv[11] = NULL;
++    setup_argv[9] = NULL;
+     run_setup((const char **) setup_argv);
+     /* Obtain a new Kerberos context with that krb5.conf file. */
diff --git a/debian/patches/series b/debian/patches/series
new file mode 100644 (file)
index 0000000..ec5913b
--- /dev/null
@@ -0,0 +1 @@
+0001-Change-CrackLib-tests-for-system-CrackLib.patch
diff --git a/debian/postinst b/debian/postinst
new file mode 100755 (executable)
index 0000000..1f23e24
--- /dev/null
@@ -0,0 +1,20 @@
+#!/bin/sh
+
+set -e
+
+# Add a user to own the password history database.
+if ! getent passwd _history >/dev/null ; then
+    echo 'Adding system user for password history' 1>&2
+    adduser --disabled-login --quiet --system --no-create-home \
+        --home /var/lib/heimdal-history --force-badname --group _history
+fi
+
+# Create the directory for the history database, owned by the history user.
+if [ ! -d /var/lib/heimdal-history ] ; then
+    mkdir /var/lib/heimdal-history
+    chown _history:_history /var/lib/heimdal-history
+fi
+
+#DEBHELPER#
+
+exit 0
diff --git a/debian/postrm b/debian/postrm
new file mode 100755 (executable)
index 0000000..d5812bf
--- /dev/null
@@ -0,0 +1,23 @@
+#!/bin/sh
+
+set -e
+
+# Purge the password history database and remove the _history user and group
+# on package purge.  This user should not be used for any other purpose.
+if [ "$1" = purge ] ; then
+    for file in history.db history.db.lock lengths.db lengths.db.lock ; do
+        rm -f "/var/lib/heimdal-history/$file"
+    done
+    deluser --quiet --system _history >/dev/null || true
+fi
+
+# Remove the directory for the password history database on remove if empty.
+if [ "$1" = purge ] || [ "$1" = remove ] ; then
+    if [ -d /var/lib/heimdal-history ] ; then
+        rmdir --ignore-fail-on-non-empty /var/lib/heimdal-history
+    fi
+fi
+
+#DEBHELPER#
+
+exit 0
diff --git a/debian/rules b/debian/rules
new file mode 100755 (executable)
index 0000000..d69eca3
--- /dev/null
@@ -0,0 +1,20 @@
+#!/usr/bin/make -f
+
+# Add hardening build flags.
+export DEB_BUILD_MAINT_OPTIONS = hardening=+all
+
+# Enable verbose test output.
+export C_TAP_VERBOSE = 1
+
+PACKAGE := $(shell dh_listpackages)
+
+%:
+       dh $@
+
+override_dh_auto_configure:
+       ./bootstrap
+       dh_auto_configure -- --enable-reduced-depends --with-cracklib
+
+override_dh_auto_install:
+       dh_auto_install
+       rm debian/$(PACKAGE)/usr/lib/*/krb5/plugins/pwqual/*.la
diff --git a/debian/source/format b/debian/source/format
new file mode 100644 (file)
index 0000000..163aaf8
--- /dev/null
@@ -0,0 +1 @@
+3.0 (quilt)
diff --git a/debian/upstream/signing-key.asc b/debian/upstream/signing-key.asc
new file mode 100644 (file)
index 0000000..24bbc5a
--- /dev/null
@@ -0,0 +1,138 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=5bZl
+-----END PGP PUBLIC KEY BLOCK-----
diff --git a/debian/watch b/debian/watch
new file mode 100644 (file)
index 0000000..33f6bb5
--- /dev/null
@@ -0,0 +1,3 @@
+version=4
+opts=pgpsigurlmangle=s/$/.asc/ \
+    https://archives.eyrie.org/software/kerberos/krb5-strength-(.*)\.tar\.xz