[24233] in Source-Commits
/svn/athena r23834 - trunk/debathena/config/pam-config/debian
daemon@ATHENA.MIT.EDU (Evan Broder)
Fri May 29 17:55:29 2009
Date: Fri, 29 May 2009 17:55:13 -0400
From: Evan Broder <broder@MIT.EDU>
Message-Id: <200905292155.n4TLtDBP028896@drugstore.mit.edu>
To: source-commits@mit.edu
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Author: broder
Date: 2009-05-29 17:55:13 -0400 (Fri, 29 May 2009)
New Revision: 23834
Modified:
trunk/debathena/config/pam-config/debian/changelog
trunk/debathena/config/pam-config/debian/transform_common-auth.debathena
Log:
In pam-config:
* Don't accept root's Kerberos password, only the local root password.
Modified: trunk/debathena/config/pam-config/debian/changelog
===================================================================
--- trunk/debathena/config/pam-config/debian/changelog 2009-05-29 21:18:37 UTC (rev 23833)
+++ trunk/debathena/config/pam-config/debian/changelog 2009-05-29 21:55:13 UTC (rev 23834)
@@ -1,3 +1,9 @@
+debathena-pam-config (1.15) unstable; urgency=low
+
+ * Don't accept root's Kerberos password, only the local root password.
+
+ -- Evan Broder <broder@mit.edu> Fri, 29 May 2009 17:54:17 -0400
+
debathena-pam-config (1.14) unstable; urgency=low
* Avoid a harmless OMINOUS WARNING on upgrades.
Modified: trunk/debathena/config/pam-config/debian/transform_common-auth.debathena
===================================================================
--- trunk/debathena/config/pam-config/debian/transform_common-auth.debathena 2009-05-29 21:18:37 UTC (rev 23833)
+++ trunk/debathena/config/pam-config/debian/transform_common-auth.debathena 2009-05-29 21:55:13 UTC (rev 23834)
@@ -1,2 +1,2 @@
#!/usr/bin/perl -0p
-s/^(auth[ \t]+)(required|requisite)( ? ?)([ \t]+)(pam_unix\.so([ \t]+.*)?)\n/$1sufficient$4$5\n$1required$3$4pam_krb5.so use_first_pass\n/m or die;
+s/^(auth[ \t]+)(required|requisite)( ? ?)([ \t]+)(pam_unix\.so([ \t]+.*)?)\n/$1sufficient$4$5\n$1required$3$4pam_krb5.so minimum_uid=1 use_first_pass\n/m or die;
