--- /dev/null
+* Obtain /etc/services entry for kftgt, if politically feasible.
--- /dev/null
+kftgt (1.6-2) unstable; urgency=low
+
+ * Depend on krb5-clients (for krb5-rlogin).
+
+ * Add recommendation to copy /etc/krb5.conf from a Stanford machine too.
+
+ -- Ben Pfaff <pfaffben@debian.org> Tue, 17 Aug 2004 10:43:20 -0700
+
+kftgt (1.6-1) unstable; urgency=low
+
+ * New upstream release. Thanks to Russ Allbery <rra@stanford.edu> for
+ pointing this out (and of course for upstream development, too) and
+ for other useful suggestions.
+
+ * Make krb5-user a recommendation and get rid of kerberos4kth-clients.
+
+ -- Ben Pfaff <pfaffben@debian.org> Sat, 19 Jun 2004 10:48:52 -0700
+
+kftgt (1.4-3) unstable; urgency=low
+
+ * Recompile for latest libkrb53. Closes: #203566.
+
+ -- Ben Pfaff <pfaffben@debian.org> Sun, 17 Aug 2003 21:22:31 -0700
+
+kftgt (1.4-2) unstable; urgency=low
+
+ * control: Change section from non-US/main to net.
+
+ * control: Update long description.
+
+ -- Ben Pfaff <pfaffben@debian.org> Sun, 20 Apr 2003 11:25:01 -0700
+
+kftgt (1.4-1) unstable; urgency=low
+
+ * New upstream source based on my patches for 1.3.
+
+ -- Ben Pfaff <pfaffben@debian.org> Sun, 19 May 2002 18:28:21 -0700
+
+kftgt (1.3) unstable; urgency=low
+
+ * New upstream source with updated license.
+
+ -- Ben Pfaff <blp@cs.stanford.edu> Sat, 12 Jan 2002 01:29:46 -0800
+
+kftgt (1.2) unstable; urgency=low
+
+ * Sync version number with upstream.
+
+ * Added license to klogin. Thanks to Russ Allbery
+ <eagle@windlord.stanford.edu>.
+
+ * Change maintainer address to pfaffben@debian.org for simplicity.
+ Apparently there's something in Debian policy that says maintainers
+ are supposed to use only one email address in packages. This is a
+ pain in the ass but I'm slowly updating now.
+
+ -- Ben Pfaff <pfaffben@debian.org> Fri, 12 Oct 2001 22:57:42 -0700
+
+kftgt (2001.10.12) unstable; urgency=low
+
+ * Added license to klogin.1. Thanks to Russ Allbery
+ <eagle@windlord.stanford.edu>.
+
+ -- Ben Pfaff <blp@cs.stanford.edu> Fri, 12 Oct 2001 22:53:35 -0700
+
+kftgt (2001.10.08) unstable; urgency=low
+
+ * Add support for krb5-clients.
+
+ * Change section to non-us/main.
+
+ * kftgtd binary package does not need Kerberos clients.
+
+ -- Ben Pfaff <blp@cs.stanford.edu> Wed, 10 Oct 2001 19:13:39 -0700
+
+kftgt (2001.10.07) unstable; urgency=low
+
+ * Update copyright file.
+
+ * Add full paths for programs invoked by klogin.
+
+ * Add manpage for klogin.
+
+ * Break into client and server binary packages.
+
+ * Server package starts kftgtd service automatically.
+
+ * Use debhelper 3 features.
+
+ -- Ben Pfaff <blp@cs.stanford.edu> Sun, 7 Oct 2001 19:54:16 -0700
+
+kftgt (2001.10.01) unstable; urgency=low
+
+ * Initial version for Stanford review before Debian release. See TODO
+ for what needs to be done.
+
+ -- Ben Pfaff <blp@cs.stanford.edu> Mon, 1 Oct 2001 22:16:24 -0700
+
--- /dev/null
+Source: kftgt
+Section: net
+Priority: extra
+Maintainer: Ben Pfaff <pfaffben@debian.org>
+Standards-Version: 3.5.9.0
+Build-Depends: debhelper (>= 3.0), libkrb5-dev
+
+Package: kftgt
+Architecture: any
+Priority: extra
+Depends: perl, krb5-clients, ${shlibs:Depends}
+Recommends: krb5-user
+Description: ticket forwarder for Kerberos 4
+ The client half of a client/server pair that allows Kerberos 4
+ tickets to be forwarded to another network host and used to
+ authenticate further services on the network. This package includes
+ kftgt, for forwarding tickets, and klogin, a script to forward a
+ ticket with kftgt and invoke krlogin in one step. For the
+ corresponding ticket forwarding server for Kerberos 4, see the kftgtd
+ package.
+ .
+ kftgt and kftgtd do not provide ticket forwarding for Kerberos 5,
+ which has built-in ticket forwarding. However, they can forward
+ Kerberos 4 tickets obtained by MIT Kerberos 5 with `kinit -4'.
+
+Package: kftgtd
+Architecture: any
+Priority: extra
+Depends: perl, ${shlibs:Depends}
+Description: ticket forwarder for Kerberos 4
+ The server half of a client/server pair that allows Kerberos 4
+ tickets to be forwarded from another network host and used to
+ authenticate further services on the network. This package contains
+ kftgtd, to receive forwarded tickets. For the corresponding ticket
+ forward client for Kerberos 4, see the kftgt package.
+ .
+ kftgt and kftgtd do not provide ticket forwarding for Kerberos 5,
+ which has built-in ticket forwarding. However, they can forward
+ Kerberos 4 tickets obtained by MIT Kerberos 5 with `kinit -4'.
--- /dev/null
+Stanford's kftgt and associated programs.
+
+This package is assembled from the sources on Stanford's Leland
+systems in /afs/ir/product/kerberos/kftgt-1.6.tar.gz.
+
+Debian package originally and currently maintained by Ben Pfaff
+<blp@cs.stanford.edu> and <pfaffben@debian.org>.
+
+kftgt and klogin were originally written by Roland Schemers
+<schemers@stanford.edu> and updated and maintained by Larry Schwimmer
+<opusl@stanford.edu>. klogin was rewritten completely by Russ Allbery
+<rra@stanford.edu> for version 1.3.
+
+License:
+
+Copyright 1994, 1997, 2001, 2003
+ Board of Trustees, Leland Stanford Jr. University
+
+All rights reserved.
+
+Export of this software from the United States of America may require a
+specific license from the United States Government. It is the
+responsibility of any person or organization contemplating export to
+obtain such a license before exporting.
+
+WITHIN THAT CONSTRAINT, permission to use, copy, modify, and distribute
+this software and its documentation for any purpose and without fee is
+hereby granted, provided that the above copyright notice appear in all
+copies and that both that copyright notice and this permission notice
+appear in supporting documentation, and that the name of Stanford
+University not be used in advertising or publicity pertaining to
+distribution of the software without specific, written prior permission.
+Stanford University makes no representations about the suitability of
+this software for any purpose. It is provided "as is" without express
+or implied warranty.
+
+THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
+WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
--- /dev/null
+To use this package with Stanford's Kerberos infrastructure, use a set
+of commands similar to the following:
+
+ kinit -f <username>@stanford.edu # get k5 ticket
+ kinit -4 <username>@IR.STANFORD.EDU # get k4 ticket
+ klogin <hostname>
+
+You will also need the krb5-user package. Configuration files
+/etc/krb.conf, /etc/krb5.conf, and /etc/krb.realms may be copied
+from any Stanford machine.
+
+ -- Ben Pfaff <pfaffben@debian.org>, Tue Aug 17 10:44:05 2004
--- /dev/null
+#! /bin/sh -e
+
+if [ remove = "$1" ]; then
+ dpkg-divert --package kftgt --remove --rename \
+ --divert /usr/share/man/man1/klogin-krb4kth-clients.1.gz \
+ /usr/share/man/man1/klogin.1.gz
+fi
+
+#DEBHELPER#
--- /dev/null
+#! /bin/sh -e
+
+if [ install = "$1" -o upgrade = "$1" ]; then
+ dpkg-divert --package kftgt --add --rename \
+ --divert /usr/share/man/man1/klogin-krb4kth-clients.1.gz \
+ /usr/share/man/man1/klogin.1.gz
+fi
+
+#DEBHELPER#
--- /dev/null
+#! /bin/sh -e
+
+if test "$1" = configure; then
+ update-inetd --add '2109 stream tcp nowait root /usr/sbin/tcpd /usr/sbin/kftgtd'
+fi
+
+#DEBHELPER#
--- /dev/null
+#! /bin/sh -e
+
+update-inetd --disable 2109
+
+#DEBHELPER#
--- /dev/null
+#!/usr/bin/make -f
+# Model by Ian Jackson.
+# Debhelper model by Joey Hess.
+# kftgt details by Ben Pfaff.
+# Released under the GNU GPL.
+
+SHELL = /bin/bash
+
+build: build-stamp
+build-stamp:
+ dh_testdir
+ AWK=awk ./configure --prefix=/usr
+ $(MAKE)
+ touch build-stamp
+
+clean:
+ dh_testdir
+ dh_testroot
+ rm -f build-stamp install-stamp
+ -rm -f build
+ -$(MAKE) -i distclean
+ dh_clean
+
+install: install-stamp
+install-stamp: build-stamp
+ dh_testdir
+ dh_testroot
+ dh_installdirs
+
+DH_COMPAT = 3
+export DH_COMPAT
+
+binary: binary-arch
+binary-arch: binary-kftgt binary-kftgtd
+
+server = kftgtd
+client = kftgt
+
+export DH_OPTIONS
+binary-kftgt: DH_OPTIONS = -p$(client)
+binary-kftgt: build
+ dh_testdir
+ dh_testroot
+ dh_clean -k
+ dh_installdocs
+ dh_installdirs usr/bin
+ install kftgt klogin debian/$(client)/usr/bin
+ dh_installchangelogs
+ dh_installman kftgt.1 klogin.1
+ dh_strip
+ dh_compress
+ dh_installdeb
+ dh_shlibdeps -v kftgt
+ dh_gencontrol
+ dh_fixperms
+ dh_builddeb
+
+binary-kftgtd: DH_OPTIONS = -p$(server)
+binary-kftgtd: build
+ dh_clean -k
+ dh_testdir
+ dh_clean -k
+ dh_testroot
+ dh_installdocs
+ dh_installdirs usr/sbin
+ install kftgtd debian/$(server)/usr/sbin
+ dh_installchangelogs
+ dh_installman kftgtd.8
+ dh_strip
+ dh_compress
+ dh_installdeb
+ dh_shlibdeps -v kftgtd
+ dh_gencontrol
+ dh_fixperms
+ dh_builddeb
+
+.PHONY: binary binary-kftgt binary-kftgtd clean checkroot