[arch-commits] Commit in krb5/repos (20 files)

Stéphane Gaudreault stephane at nymeria.archlinux.org
Fri May 17 07:38:52 EDT 2013


    Date: Friday, May 17, 2013 @ 13:38:52
  Author: stephane
Revision: 185701

archrelease: copy trunk to testing-i686, testing-x86_64

Added:
  krb5/repos/testing-i686/
  krb5/repos/testing-i686/CVE-2002-2443.patch
    (from rev 185700, krb5/trunk/CVE-2002-2443.patch)
  krb5/repos/testing-i686/PKGBUILD
    (from rev 185700, krb5/trunk/PKGBUILD)
  krb5/repos/testing-i686/krb5-1.10.1-gcc47.patch
    (from rev 185700, krb5/trunk/krb5-1.10.1-gcc47.patch)
  krb5/repos/testing-i686/krb5-config_LDFLAGS.patch
    (from rev 185700, krb5/trunk/krb5-config_LDFLAGS.patch)
  krb5/repos/testing-i686/krb5-kadmind.service
    (from rev 185700, krb5/trunk/krb5-kadmind.service)
  krb5/repos/testing-i686/krb5-kdc.service
    (from rev 185700, krb5/trunk/krb5-kdc.service)
  krb5/repos/testing-i686/krb5-kpropd.service
    (from rev 185700, krb5/trunk/krb5-kpropd.service)
  krb5/repos/testing-i686/krb5-kpropd.socket
    (from rev 185700, krb5/trunk/krb5-kpropd.socket)
  krb5/repos/testing-i686/krb5-kpropd at .service
    (from rev 185700, krb5/trunk/krb5-kpropd at .service)
  krb5/repos/testing-x86_64/
  krb5/repos/testing-x86_64/CVE-2002-2443.patch
    (from rev 185700, krb5/trunk/CVE-2002-2443.patch)
  krb5/repos/testing-x86_64/PKGBUILD
    (from rev 185700, krb5/trunk/PKGBUILD)
  krb5/repos/testing-x86_64/krb5-1.10.1-gcc47.patch
    (from rev 185700, krb5/trunk/krb5-1.10.1-gcc47.patch)
  krb5/repos/testing-x86_64/krb5-config_LDFLAGS.patch
    (from rev 185700, krb5/trunk/krb5-config_LDFLAGS.patch)
  krb5/repos/testing-x86_64/krb5-kadmind.service
    (from rev 185700, krb5/trunk/krb5-kadmind.service)
  krb5/repos/testing-x86_64/krb5-kdc.service
    (from rev 185700, krb5/trunk/krb5-kdc.service)
  krb5/repos/testing-x86_64/krb5-kpropd.service
    (from rev 185700, krb5/trunk/krb5-kpropd.service)
  krb5/repos/testing-x86_64/krb5-kpropd.socket
    (from rev 185700, krb5/trunk/krb5-kpropd.socket)
  krb5/repos/testing-x86_64/krb5-kpropd at .service
    (from rev 185700, krb5/trunk/krb5-kpropd at .service)

------------------------------------------+
 testing-i686/CVE-2002-2443.patch         |   69 ++++++++++++++++++++++
 testing-i686/PKGBUILD                    |   89 +++++++++++++++++++++++++++++
 testing-i686/krb5-1.10.1-gcc47.patch     |   11 +++
 testing-i686/krb5-config_LDFLAGS.patch   |   12 +++
 testing-i686/krb5-kadmind.service        |    8 ++
 testing-i686/krb5-kdc.service            |    9 ++
 testing-i686/krb5-kpropd.service         |    8 ++
 testing-i686/krb5-kpropd.socket          |    9 ++
 testing-i686/krb5-kpropd at .service        |    8 ++
 testing-x86_64/CVE-2002-2443.patch       |   69 ++++++++++++++++++++++
 testing-x86_64/PKGBUILD                  |   89 +++++++++++++++++++++++++++++
 testing-x86_64/krb5-1.10.1-gcc47.patch   |   11 +++
 testing-x86_64/krb5-config_LDFLAGS.patch |   12 +++
 testing-x86_64/krb5-kadmind.service      |    8 ++
 testing-x86_64/krb5-kdc.service          |    9 ++
 testing-x86_64/krb5-kpropd.service       |    8 ++
 testing-x86_64/krb5-kpropd.socket        |    9 ++
 testing-x86_64/krb5-kpropd at .service      |    8 ++
 18 files changed, 446 insertions(+)

Copied: krb5/repos/testing-i686/CVE-2002-2443.patch (from rev 185700, krb5/trunk/CVE-2002-2443.patch)
===================================================================
--- testing-i686/CVE-2002-2443.patch	                        (rev 0)
+++ testing-i686/CVE-2002-2443.patch	2013-05-17 11:38:52 UTC (rev 185701)
@@ -0,0 +1,69 @@
+From cf1a0c411b2668c57c41e9c4efd15ba17b6b322c Mon Sep 17 00:00:00 2001
+From: Tom Yu <tlyu at mit.edu>
+Date: Fri, 3 May 2013 16:26:46 -0400
+Subject: [PATCH] Fix kpasswd UDP ping-pong [CVE-2002-2443]
+
+The kpasswd service provided by kadmind was vulnerable to a UDP
+"ping-pong" attack [CVE-2002-2443].  Don't respond to packets unless
+they pass some basic validation, and don't respond to our own error
+packets.
+
+Some authors use CVE-1999-0103 to refer to the kpasswd UDP ping-pong
+attack or UDP ping-pong attacks in general, but there is discussion
+leading toward narrowing the definition of CVE-1999-0103 to the echo,
+chargen, or other similar built-in inetd services.
+
+Thanks to Vincent Danen for alerting us to this issue.
+
+CVSSv2: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:P/RL:O/RC:C
+
+ticket: 7637 (new)
+target_version: 1.11.3
+tags: pullup
+---
+ src/kadmin/server/schpw.c | 8 ++++----
+ 1 file changed, 4 insertions(+), 4 deletions(-)
+
+diff --git a/src/kadmin/server/schpw.c b/src/kadmin/server/schpw.c
+index 15b0ab5..7f455d8 100644
+--- a/src/kadmin/server/schpw.c
++++ b/src/kadmin/server/schpw.c
+@@ -52,7 +52,7 @@
+         ret = KRB5KRB_AP_ERR_MODIFIED;
+         numresult = KRB5_KPASSWD_MALFORMED;
+         strlcpy(strresult, "Request was truncated", sizeof(strresult));
+-        goto chpwfail;
++        goto bailout;
+     }
+ 
+     ptr = req->data;
+@@ -67,7 +67,7 @@
+         numresult = KRB5_KPASSWD_MALFORMED;
+         strlcpy(strresult, "Request length was inconsistent",
+                 sizeof(strresult));
+-        goto chpwfail;
++        goto bailout;
+     }
+ 
+     /* verify version number */
+@@ -80,7 +80,7 @@
+         numresult = KRB5_KPASSWD_BAD_VERSION;
+         snprintf(strresult, sizeof(strresult),
+                  "Request contained unknown protocol version number %d", vno);
+-        goto chpwfail;
++        goto bailout;
+     }
+ 
+     /* read, check ap-req length */
+@@ -93,7 +93,7 @@
+         numresult = KRB5_KPASSWD_MALFORMED;
+         strlcpy(strresult, "Request was truncated in AP-REQ",
+                 sizeof(strresult));
+-        goto chpwfail;
++        goto bailout;
+     }
+ 
+     /* verify ap_req */
+-- 
+1.8.1.6
+

Copied: krb5/repos/testing-i686/PKGBUILD (from rev 185700, krb5/trunk/PKGBUILD)
===================================================================
--- testing-i686/PKGBUILD	                        (rev 0)
+++ testing-i686/PKGBUILD	2013-05-17 11:38:52 UTC (rev 185701)
@@ -0,0 +1,89 @@
+# $Id$
+# Maintainer: Stéphane Gaudreault <stephane at archlinux.org>
+
+pkgname=krb5
+pkgver=1.11.2
+pkgrel=4
+pkgdesc="The Kerberos network authentication system"
+arch=('i686' 'x86_64')
+url="http://web.mit.edu/kerberos/"
+license=('custom')
+depends=('e2fsprogs' 'libldap' 'keyutils')
+makedepends=('perl')
+backup=('etc/krb5.conf' 'var/lib/krb5kdc/kdc.conf')
+source=(http://web.mit.edu/kerberos/dist/${pkgname}/1.11/${pkgname}-${pkgver}-signed.tar
+        CVE-2002-2443.patch
+        krb5-config_LDFLAGS.patch
+        krb5-kadmind.service
+        krb5-kdc.service
+        krb5-kpropd.service
+        krb5-kpropd at .service
+        krb5-kpropd.socket)
+sha1sums=('3863f7bdb2d8fc3e50484fb566124373c4b0a250'
+          '78ec307c2b5e32481a6da401013c428e0b867f36'
+          '09e478cddfb9d46d2981dd25ef96b8c3fd91e1aa'
+          'a2a01e7077d9e89cda3457ea0e216debb3dc353c'
+          'f5e4fa073e11b0fcb4e3098a5d58a4f791ec841e'
+          '614401dd4ac18e310153240bb26eb32ff1e8cf5b'
+          '023a8164f8ee7066ac814486a68bc605e79f6101'
+          'f3677d30dbbd7106c581379c2c6ebb1bf7738912')
+options=('!emptydirs')
+
+build() {
+   tar zxvf ${pkgname}-${pkgver}.tar.gz
+   cd "${srcdir}/${pkgname}-${pkgver}/src"
+
+   # cf https://bugs.gentoo.org/show_bug.cgi?id=448778
+   patch -Np2 -i "${srcdir}"/krb5-config_LDFLAGS.patch
+
+   # Fix kpasswd UDP ping-pong (CVE-2002-2443)
+   patch -Np2 -i "${srcdir}"/CVE-2002-2443.patch
+
+   rm lib/krb5/krb/deltat.c
+
+   # FS#25384
+   sed -i "/KRB5ROOT=/s/\/local//" util/ac_check_krb5.m4
+
+   export CFLAGS+=" -fPIC -fno-strict-aliasing -fstack-protector-all"
+   export CPPFLAGS+=" -I/usr/include/et"
+   ./configure --prefix=/usr \
+               --sbindir=/usr/bin \
+               --sysconfdir=/etc \
+               --mandir=/usr/share/man \
+               --localstatedir=/var/lib \
+               --enable-shared \
+               --with-system-et \
+               --with-system-ss \
+               --disable-rpath \
+               --without-tcl \
+               --enable-dns-for-realm \
+               --with-ldap \
+               --without-system-verto
+   make
+}
+
+package() {
+   cd "${srcdir}/${pkgname}-${pkgver}/src"
+   make DESTDIR="${pkgdir}" EXAMPLEDIR=/usr/share/doc/${pkgname}/examples install
+
+   # Fix FS#29889
+   install -m 644 plugins/kdb/ldap/libkdb_ldap/kerberos.{ldif,schema} "${pkgdir}"/usr/share/doc/${pkgname}/examples
+
+   # Sample KDC config file
+   install -dm 755 "${pkgdir}"/var/lib/krb5kdc
+   install -pm 644 config-files/kdc.conf "${pkgdir}"/var/lib/krb5kdc/kdc.conf
+
+   # Default configuration file
+   install -dm 755 "${pkgdir}"/etc
+   install -pm 644 config-files/krb5.conf "${pkgdir}"/etc/krb5.conf
+
+   install -dm 755 "${pkgdir}"/usr/share/aclocal
+   install -m 644 util/ac_check_krb5.m4 "${pkgdir}"/usr/share/aclocal
+
+   install -Dm644 "${srcdir}"/${pkgname}-${pkgver}/NOTICE "${pkgdir}"/usr/share/licenses/${pkgname}/LICENSE
+
+   # systemd stuff
+   install -dm 755 "${pkgdir}"/usr/lib/systemd/system
+   install -m 644 ../../krb5-{kadmind.service,kdc.service,kpropd.service,kpropd at .service,kpropd.socket} \
+      "${pkgdir}"/usr/lib/systemd/system
+}

Copied: krb5/repos/testing-i686/krb5-1.10.1-gcc47.patch (from rev 185700, krb5/trunk/krb5-1.10.1-gcc47.patch)
===================================================================
--- testing-i686/krb5-1.10.1-gcc47.patch	                        (rev 0)
+++ testing-i686/krb5-1.10.1-gcc47.patch	2013-05-17 11:38:52 UTC (rev 185701)
@@ -0,0 +1,11 @@
+diff -Naur krb5-1.10.1.ori/src/lib/krb5/krb/x-deltat.y krb5-1.10.1/src/lib/krb5/krb/x-deltat.y
+--- krb5-1.10.1.ori/src/lib/krb5/krb/x-deltat.y	2011-09-06 07:34:32.000000000 -0400
++++ krb5-1.10.1/src/lib/krb5/krb/x-deltat.y	2012-03-24 13:15:11.543551318 -0400
+@@ -44,6 +44,7 @@
+ #ifdef __GNUC__
+ #pragma GCC diagnostic push
+ #pragma GCC diagnostic ignored "-Wuninitialized"
++#pragma GCC diagnostic ignored "-Wmaybe-uninitialized"
+ #endif
+ 
+ #include <ctype.h>

Copied: krb5/repos/testing-i686/krb5-config_LDFLAGS.patch (from rev 185700, krb5/trunk/krb5-config_LDFLAGS.patch)
===================================================================
--- testing-i686/krb5-config_LDFLAGS.patch	                        (rev 0)
+++ testing-i686/krb5-config_LDFLAGS.patch	2013-05-17 11:38:52 UTC (rev 185701)
@@ -0,0 +1,12 @@
+Bug #448778
+--- krb5-1.11/src/krb5-config.in	2012-12-18 02:47:04.000000000 +0000
++++ krb5-1.11/src/krb5-config.in	2012-12-28 07:13:16.582693363 +0000
+@@ -217,7 +217,7 @@
+ 	    -e 's#\$(PROG_RPATH)#'$libdir'#' \
+ 	    -e 's#\$(PROG_LIBPATH)#'$libdirarg'#' \
+ 	    -e 's#\$(RPATH_FLAG)#'"$RPATH_FLAG"'#' \
+-	    -e 's#\$(LDFLAGS)#'"$LDFLAGS"'#' \
++	    -e 's#\$(LDFLAGS)##' \
+ 	    -e 's#\$(PTHREAD_CFLAGS)#'"$PTHREAD_CFLAGS"'#' \
+ 	    -e 's#\$(CFLAGS)##'`
+ 

Copied: krb5/repos/testing-i686/krb5-kadmind.service (from rev 185700, krb5/trunk/krb5-kadmind.service)
===================================================================
--- testing-i686/krb5-kadmind.service	                        (rev 0)
+++ testing-i686/krb5-kadmind.service	2013-05-17 11:38:52 UTC (rev 185701)
@@ -0,0 +1,8 @@
+[Unit]
+Description=Kerberos 5 administration server
+
+[Service]
+ExecStart=/usr/sbin/kadmind -nofork
+
+[Install]
+WantedBy=multi-user.target

Copied: krb5/repos/testing-i686/krb5-kdc.service (from rev 185700, krb5/trunk/krb5-kdc.service)
===================================================================
--- testing-i686/krb5-kdc.service	                        (rev 0)
+++ testing-i686/krb5-kdc.service	2013-05-17 11:38:52 UTC (rev 185701)
@@ -0,0 +1,9 @@
+[Unit]
+Description=Kerberos 5 KDC
+
+[Service]
+ExecStart=/usr/sbin/krb5kdc -n
+Restart=always
+
+[Install]
+WantedBy=multi-user.target

Copied: krb5/repos/testing-i686/krb5-kpropd.service (from rev 185700, krb5/trunk/krb5-kpropd.service)
===================================================================
--- testing-i686/krb5-kpropd.service	                        (rev 0)
+++ testing-i686/krb5-kpropd.service	2013-05-17 11:38:52 UTC (rev 185701)
@@ -0,0 +1,8 @@
+[Unit]
+Description=Kerberos 5 propagation server
+
+[Service]
+ExecStart=/usr/sbin/kpropd -S
+
+[Install]
+WantedBy=multi-user.target

Copied: krb5/repos/testing-i686/krb5-kpropd.socket (from rev 185700, krb5/trunk/krb5-kpropd.socket)
===================================================================
--- testing-i686/krb5-kpropd.socket	                        (rev 0)
+++ testing-i686/krb5-kpropd.socket	2013-05-17 11:38:52 UTC (rev 185701)
@@ -0,0 +1,9 @@
+[Unit]
+Description=Kerberos 5 propagation server
+
+[Socket]
+ListenStream=754
+Accept=yes
+
+[Install]
+WantedBy=sockets.target

Copied: krb5/repos/testing-i686/krb5-kpropd at .service (from rev 185700, krb5/trunk/krb5-kpropd at .service)
===================================================================
--- testing-i686/krb5-kpropd at .service	                        (rev 0)
+++ testing-i686/krb5-kpropd at .service	2013-05-17 11:38:52 UTC (rev 185701)
@@ -0,0 +1,8 @@
+[Unit]
+Description=Kerberos 5 propagation server
+Conflicts=krb5-kpropd.service
+
+[Service]
+ExecStart=/usr/sbin/kpropd
+StandardInput=socket
+StandardError=syslog

Copied: krb5/repos/testing-x86_64/CVE-2002-2443.patch (from rev 185700, krb5/trunk/CVE-2002-2443.patch)
===================================================================
--- testing-x86_64/CVE-2002-2443.patch	                        (rev 0)
+++ testing-x86_64/CVE-2002-2443.patch	2013-05-17 11:38:52 UTC (rev 185701)
@@ -0,0 +1,69 @@
+From cf1a0c411b2668c57c41e9c4efd15ba17b6b322c Mon Sep 17 00:00:00 2001
+From: Tom Yu <tlyu at mit.edu>
+Date: Fri, 3 May 2013 16:26:46 -0400
+Subject: [PATCH] Fix kpasswd UDP ping-pong [CVE-2002-2443]
+
+The kpasswd service provided by kadmind was vulnerable to a UDP
+"ping-pong" attack [CVE-2002-2443].  Don't respond to packets unless
+they pass some basic validation, and don't respond to our own error
+packets.
+
+Some authors use CVE-1999-0103 to refer to the kpasswd UDP ping-pong
+attack or UDP ping-pong attacks in general, but there is discussion
+leading toward narrowing the definition of CVE-1999-0103 to the echo,
+chargen, or other similar built-in inetd services.
+
+Thanks to Vincent Danen for alerting us to this issue.
+
+CVSSv2: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:P/RL:O/RC:C
+
+ticket: 7637 (new)
+target_version: 1.11.3
+tags: pullup
+---
+ src/kadmin/server/schpw.c | 8 ++++----
+ 1 file changed, 4 insertions(+), 4 deletions(-)
+
+diff --git a/src/kadmin/server/schpw.c b/src/kadmin/server/schpw.c
+index 15b0ab5..7f455d8 100644
+--- a/src/kadmin/server/schpw.c
++++ b/src/kadmin/server/schpw.c
+@@ -52,7 +52,7 @@
+         ret = KRB5KRB_AP_ERR_MODIFIED;
+         numresult = KRB5_KPASSWD_MALFORMED;
+         strlcpy(strresult, "Request was truncated", sizeof(strresult));
+-        goto chpwfail;
++        goto bailout;
+     }
+ 
+     ptr = req->data;
+@@ -67,7 +67,7 @@
+         numresult = KRB5_KPASSWD_MALFORMED;
+         strlcpy(strresult, "Request length was inconsistent",
+                 sizeof(strresult));
+-        goto chpwfail;
++        goto bailout;
+     }
+ 
+     /* verify version number */
+@@ -80,7 +80,7 @@
+         numresult = KRB5_KPASSWD_BAD_VERSION;
+         snprintf(strresult, sizeof(strresult),
+                  "Request contained unknown protocol version number %d", vno);
+-        goto chpwfail;
++        goto bailout;
+     }
+ 
+     /* read, check ap-req length */
+@@ -93,7 +93,7 @@
+         numresult = KRB5_KPASSWD_MALFORMED;
+         strlcpy(strresult, "Request was truncated in AP-REQ",
+                 sizeof(strresult));
+-        goto chpwfail;
++        goto bailout;
+     }
+ 
+     /* verify ap_req */
+-- 
+1.8.1.6
+

Copied: krb5/repos/testing-x86_64/PKGBUILD (from rev 185700, krb5/trunk/PKGBUILD)
===================================================================
--- testing-x86_64/PKGBUILD	                        (rev 0)
+++ testing-x86_64/PKGBUILD	2013-05-17 11:38:52 UTC (rev 185701)
@@ -0,0 +1,89 @@
+# $Id$
+# Maintainer: Stéphane Gaudreault <stephane at archlinux.org>
+
+pkgname=krb5
+pkgver=1.11.2
+pkgrel=4
+pkgdesc="The Kerberos network authentication system"
+arch=('i686' 'x86_64')
+url="http://web.mit.edu/kerberos/"
+license=('custom')
+depends=('e2fsprogs' 'libldap' 'keyutils')
+makedepends=('perl')
+backup=('etc/krb5.conf' 'var/lib/krb5kdc/kdc.conf')
+source=(http://web.mit.edu/kerberos/dist/${pkgname}/1.11/${pkgname}-${pkgver}-signed.tar
+        CVE-2002-2443.patch
+        krb5-config_LDFLAGS.patch
+        krb5-kadmind.service
+        krb5-kdc.service
+        krb5-kpropd.service
+        krb5-kpropd at .service
+        krb5-kpropd.socket)
+sha1sums=('3863f7bdb2d8fc3e50484fb566124373c4b0a250'
+          '78ec307c2b5e32481a6da401013c428e0b867f36'
+          '09e478cddfb9d46d2981dd25ef96b8c3fd91e1aa'
+          'a2a01e7077d9e89cda3457ea0e216debb3dc353c'
+          'f5e4fa073e11b0fcb4e3098a5d58a4f791ec841e'
+          '614401dd4ac18e310153240bb26eb32ff1e8cf5b'
+          '023a8164f8ee7066ac814486a68bc605e79f6101'
+          'f3677d30dbbd7106c581379c2c6ebb1bf7738912')
+options=('!emptydirs')
+
+build() {
+   tar zxvf ${pkgname}-${pkgver}.tar.gz
+   cd "${srcdir}/${pkgname}-${pkgver}/src"
+
+   # cf https://bugs.gentoo.org/show_bug.cgi?id=448778
+   patch -Np2 -i "${srcdir}"/krb5-config_LDFLAGS.patch
+
+   # Fix kpasswd UDP ping-pong (CVE-2002-2443)
+   patch -Np2 -i "${srcdir}"/CVE-2002-2443.patch
+
+   rm lib/krb5/krb/deltat.c
+
+   # FS#25384
+   sed -i "/KRB5ROOT=/s/\/local//" util/ac_check_krb5.m4
+
+   export CFLAGS+=" -fPIC -fno-strict-aliasing -fstack-protector-all"
+   export CPPFLAGS+=" -I/usr/include/et"
+   ./configure --prefix=/usr \
+               --sbindir=/usr/bin \
+               --sysconfdir=/etc \
+               --mandir=/usr/share/man \
+               --localstatedir=/var/lib \
+               --enable-shared \
+               --with-system-et \
+               --with-system-ss \
+               --disable-rpath \
+               --without-tcl \
+               --enable-dns-for-realm \
+               --with-ldap \
+               --without-system-verto
+   make
+}
+
+package() {
+   cd "${srcdir}/${pkgname}-${pkgver}/src"
+   make DESTDIR="${pkgdir}" EXAMPLEDIR=/usr/share/doc/${pkgname}/examples install
+
+   # Fix FS#29889
+   install -m 644 plugins/kdb/ldap/libkdb_ldap/kerberos.{ldif,schema} "${pkgdir}"/usr/share/doc/${pkgname}/examples
+
+   # Sample KDC config file
+   install -dm 755 "${pkgdir}"/var/lib/krb5kdc
+   install -pm 644 config-files/kdc.conf "${pkgdir}"/var/lib/krb5kdc/kdc.conf
+
+   # Default configuration file
+   install -dm 755 "${pkgdir}"/etc
+   install -pm 644 config-files/krb5.conf "${pkgdir}"/etc/krb5.conf
+
+   install -dm 755 "${pkgdir}"/usr/share/aclocal
+   install -m 644 util/ac_check_krb5.m4 "${pkgdir}"/usr/share/aclocal
+
+   install -Dm644 "${srcdir}"/${pkgname}-${pkgver}/NOTICE "${pkgdir}"/usr/share/licenses/${pkgname}/LICENSE
+
+   # systemd stuff
+   install -dm 755 "${pkgdir}"/usr/lib/systemd/system
+   install -m 644 ../../krb5-{kadmind.service,kdc.service,kpropd.service,kpropd at .service,kpropd.socket} \
+      "${pkgdir}"/usr/lib/systemd/system
+}

Copied: krb5/repos/testing-x86_64/krb5-1.10.1-gcc47.patch (from rev 185700, krb5/trunk/krb5-1.10.1-gcc47.patch)
===================================================================
--- testing-x86_64/krb5-1.10.1-gcc47.patch	                        (rev 0)
+++ testing-x86_64/krb5-1.10.1-gcc47.patch	2013-05-17 11:38:52 UTC (rev 185701)
@@ -0,0 +1,11 @@
+diff -Naur krb5-1.10.1.ori/src/lib/krb5/krb/x-deltat.y krb5-1.10.1/src/lib/krb5/krb/x-deltat.y
+--- krb5-1.10.1.ori/src/lib/krb5/krb/x-deltat.y	2011-09-06 07:34:32.000000000 -0400
++++ krb5-1.10.1/src/lib/krb5/krb/x-deltat.y	2012-03-24 13:15:11.543551318 -0400
+@@ -44,6 +44,7 @@
+ #ifdef __GNUC__
+ #pragma GCC diagnostic push
+ #pragma GCC diagnostic ignored "-Wuninitialized"
++#pragma GCC diagnostic ignored "-Wmaybe-uninitialized"
+ #endif
+ 
+ #include <ctype.h>

Copied: krb5/repos/testing-x86_64/krb5-config_LDFLAGS.patch (from rev 185700, krb5/trunk/krb5-config_LDFLAGS.patch)
===================================================================
--- testing-x86_64/krb5-config_LDFLAGS.patch	                        (rev 0)
+++ testing-x86_64/krb5-config_LDFLAGS.patch	2013-05-17 11:38:52 UTC (rev 185701)
@@ -0,0 +1,12 @@
+Bug #448778
+--- krb5-1.11/src/krb5-config.in	2012-12-18 02:47:04.000000000 +0000
++++ krb5-1.11/src/krb5-config.in	2012-12-28 07:13:16.582693363 +0000
+@@ -217,7 +217,7 @@
+ 	    -e 's#\$(PROG_RPATH)#'$libdir'#' \
+ 	    -e 's#\$(PROG_LIBPATH)#'$libdirarg'#' \
+ 	    -e 's#\$(RPATH_FLAG)#'"$RPATH_FLAG"'#' \
+-	    -e 's#\$(LDFLAGS)#'"$LDFLAGS"'#' \
++	    -e 's#\$(LDFLAGS)##' \
+ 	    -e 's#\$(PTHREAD_CFLAGS)#'"$PTHREAD_CFLAGS"'#' \
+ 	    -e 's#\$(CFLAGS)##'`
+ 

Copied: krb5/repos/testing-x86_64/krb5-kadmind.service (from rev 185700, krb5/trunk/krb5-kadmind.service)
===================================================================
--- testing-x86_64/krb5-kadmind.service	                        (rev 0)
+++ testing-x86_64/krb5-kadmind.service	2013-05-17 11:38:52 UTC (rev 185701)
@@ -0,0 +1,8 @@
+[Unit]
+Description=Kerberos 5 administration server
+
+[Service]
+ExecStart=/usr/sbin/kadmind -nofork
+
+[Install]
+WantedBy=multi-user.target

Copied: krb5/repos/testing-x86_64/krb5-kdc.service (from rev 185700, krb5/trunk/krb5-kdc.service)
===================================================================
--- testing-x86_64/krb5-kdc.service	                        (rev 0)
+++ testing-x86_64/krb5-kdc.service	2013-05-17 11:38:52 UTC (rev 185701)
@@ -0,0 +1,9 @@
+[Unit]
+Description=Kerberos 5 KDC
+
+[Service]
+ExecStart=/usr/sbin/krb5kdc -n
+Restart=always
+
+[Install]
+WantedBy=multi-user.target

Copied: krb5/repos/testing-x86_64/krb5-kpropd.service (from rev 185700, krb5/trunk/krb5-kpropd.service)
===================================================================
--- testing-x86_64/krb5-kpropd.service	                        (rev 0)
+++ testing-x86_64/krb5-kpropd.service	2013-05-17 11:38:52 UTC (rev 185701)
@@ -0,0 +1,8 @@
+[Unit]
+Description=Kerberos 5 propagation server
+
+[Service]
+ExecStart=/usr/sbin/kpropd -S
+
+[Install]
+WantedBy=multi-user.target

Copied: krb5/repos/testing-x86_64/krb5-kpropd.socket (from rev 185700, krb5/trunk/krb5-kpropd.socket)
===================================================================
--- testing-x86_64/krb5-kpropd.socket	                        (rev 0)
+++ testing-x86_64/krb5-kpropd.socket	2013-05-17 11:38:52 UTC (rev 185701)
@@ -0,0 +1,9 @@
+[Unit]
+Description=Kerberos 5 propagation server
+
+[Socket]
+ListenStream=754
+Accept=yes
+
+[Install]
+WantedBy=sockets.target

Copied: krb5/repos/testing-x86_64/krb5-kpropd at .service (from rev 185700, krb5/trunk/krb5-kpropd at .service)
===================================================================
--- testing-x86_64/krb5-kpropd at .service	                        (rev 0)
+++ testing-x86_64/krb5-kpropd at .service	2013-05-17 11:38:52 UTC (rev 185701)
@@ -0,0 +1,8 @@
+[Unit]
+Description=Kerberos 5 propagation server
+Conflicts=krb5-kpropd.service
+
+[Service]
+ExecStart=/usr/sbin/kpropd
+StandardInput=socket
+StandardError=syslog



More information about the arch-commits mailing list