Tags

Tags give the ability to mark specific points in history as being important

upstream/4.6.0

e39c7315 · Imported Upstream version 4.6.0 · Mar 18, 2014
```
Upstream version 4.6.0
```
release/4.6.0

74f7ca53 · Restructure and improve the mod_webauth tests · Mar 18, 2014
```
WebAuth release 4.6.0
```
Unverified

debian/4.5.5-2

a54b7183 · Add changelog for 4.5.5-2 upload · Sep 08, 2013

Debian release 4.5.5-2

Format: 1.8
Date: Sun, 08 Sep 2013 10:51:03 -0700
Source: webauth
Binary: libapache2-mod-webauth libapache2-mod-webauthldap libapache2-mod-webkdc libapache2-webauth libapache2-webkdc libwebauth-perl libwebauth10 libwebauth-dev libwebkdc-perl webauth-tests webauth-utils webauth-weblogin
Architecture: source i386 all
Version: 4.5.5-2
Distribution: unstable
Urgency: low
Maintainer: Russ Allbery <rra@debian.org>
Changed-By: Russ Allbery <rra@debian.org>
Description:
 libapache2-mod-webauth - Apache module for WebAuth authentication
 libapache2-mod-webauthldap - Apache module for WebAuth LDAP lookup and authorization
 libapache2-mod-webkdc - Apache modules for a WebAuth authentication KDC
 libapache2-webauth - Transitional package for WebAuth Apache modules
 libapache2-webkdc - Transitional package for WebAuth authentication KDC
 libwebauth-dev - Development files for WebAuth authentication
 libwebauth-perl - Perl library for WebAuth authentication
 libwebauth10 - Shared libraries for WebAuth authentication
 libwebkdc-perl - Perl libraries for WebAuth central login server
 webauth-tests - Tests for the WebAuth authentication modules
 webauth-utils - Command-line utilities for WebAuth authentication
 webauth-weblogin - Central login server for WebAuth authentication
Changes:
 webauth (4.5.5-2) unstable; urgency=low
 .
   * Upload to unstable.
 .
 webauth (4.5.5-1) experimental; urgency=low
 .
   * New upstream release.
     - Warn about mismatched webkdc-proxy tokens but no longer treat them
       as a fatal error.
     - Fix handling of non-password session factor requirements.
     - Improve handling of initial factor requirements when users have a
       way to establish initial credentials that don't include a password
       factor.
     - Improve handling of a Kerberos webkdc-proxy token requirement during
       a multifactor authentication.
     - Retry WebLogin posts to the WebKDC once to be more robust against
       interruptions by signals (such as from the FastCGI process manager).
     - Produce more succinct and hopefully better error messages when
       WebLogin cannot post to the WebKDC.
     - Ignore SIGPIPE signals in WebLogin scripts.
     - Require the return URL be absolute and not contain non-ASCII
       characters in mod_webkdc processing.
     - Fix WebLogin replay detection logic to not trigger on password
       changes.
     - Work around problems in WebLogin caused by the WebKDC returning
       error messages that contain undeclared non-UTF-8 characters in
       violation of the XML standard.
     - Improve error reporting of unparsable XML received by the WebLogin
       server from the WebKDC.
     - Fix logging of mod_webkdc <requestTokenRequest> failures.
     - Fix the prototype attributes for webauth_user_validate.
     - Log when mod_webkdc ignores expired tokens.
     - Display more correct errors after some failures during the second
       step of a multifactor authentication.
     - Correctly diagnose a missing service token in a WebLogin request and
       report the correct error instead of an internal error.
     - Make the version of all Perl modules match the WebAuth release.
     - Better error display for logins rejected by the user information
       service.
     - Better error display for multifactor authentication errors.
     - Rate limiting and replay detection are now also applied to the
       multifactor login page.
     - Fix replay detection by correcting choice of memcached keys.
     - Support staying on the code entry page after an error when using an
       SMS method for multifactor.  Local template changes are required to
       take advantage of this feature.
Checksums-Sha1:
 1eb50763038d282c27a77d827cdfb390fa1df665 2082 webauth_4.5.5-2.dsc
 5a215baa8ed44f5f6a9111f76b4e1e3b9301ee2c 27840 webauth_4.5.5-2.debian.tar.xz
 440f3515a4215239df138fd3adad0bd79c52803c 224884 libapache2-mod-webauth_4.5.5-2_i386.deb
 0e4526c8d93a18a9222116e6a3279d222f29a04e 90702 libapache2-mod-webauthldap_4.5.5-2_i386.deb
 36309ef5f152083895f42a6c974e5b3c1b86b1f1 110364 libapache2-mod-webkdc_4.5.5-2_i386.deb
 aad09605606f818ccf442727e22e067df2765c5c 52360 libapache2-webauth_4.5.5-2_all.deb
 7ade57ccb0dfc142dcae511761c3363d838fcf76 51616 libapache2-webkdc_4.5.5-2_all.deb
 f9fb7c315ea406254f3edd2c6e521ee696a346f0 146320 libwebauth-perl_4.5.5-2_i386.deb
 774337242658f07b7136c1f1e958d1dca124f5a1 84898 libwebauth10_4.5.5-2_i386.deb
 6b3bc5d8192e2195ce026aa7ebbb4fa938dfcb7d 100706 libwebauth-dev_4.5.5-2_i386.deb
 6093b01124a36701432881bce4390d992434f97b 120776 libwebkdc-perl_4.5.5-2_all.deb
 b2dd69059f649279137e40528ede93bd3c463aa0 62456 webauth-tests_4.5.5-2_all.deb
 b40f6cfe6ec01446e2a634345cbf62840a355949 60614 webauth-utils_4.5.5-2_i386.deb
 a7ee4d3cc18a4ab0d3c64c40d0216af644db1e2a 120926 webauth-weblogin_4.5.5-2_all.deb
Checksums-Sha256:
 5331d36025954f75ef10b43008392d8da3e923302ef79110d776b5b62a95c375 2082 webauth_4.5.5-2.dsc
 d981bc12feae1c1a28d71b4dec4384f56275332d14763534cbf51933ee30b7ad 27840 webauth_4.5.5-2.debian.tar.xz
 f5f2809e9f372e8b66622475d35c13f68c61850174b6eea5f7e79db935cf578d 224884 libapache2-mod-webauth_4.5.5-2_i386.deb
 aada4fafb36c39a0bab57c01fc1cc0ab94854bd6b56f82bc529ca4538737de0c 90702 libapache2-mod-webauthldap_4.5.5-2_i386.deb
 6143be73c7830eddddec6d7d2534d6a6e820cf26a8bf1cc812fb36fd4fbd11fd 110364 libapache2-mod-webkdc_4.5.5-2_i386.deb
 5f61f62e758074fb0aa22a640b83efa70ba4f93c288e2ec0b2eacf4bc8c7f324 52360 libapache2-webauth_4.5.5-2_all.deb
 a6591bc14c1612150edcc3f0ae7a6b720a5af7ad3a1ce4ccda19b9fc2f8b7ee3 51616 libapache2-webkdc_4.5.5-2_all.deb
 54e796e8de72e987af1ac1258f34c41723c30fe6e6cfca3ba1dafc4593439c69 146320 libwebauth-perl_4.5.5-2_i386.deb
 c1e1c0d64a20db7f222b9b5179d8957c926418bd448738489f7593ce97b84b65 84898 libwebauth10_4.5.5-2_i386.deb
 ae3f9423a9ad687fb20396186a565d8760c121c03ba47bd4cd544b8743c80742 100706 libwebauth-dev_4.5.5-2_i386.deb
 d7465ed6f5d7f9099a7590004f6977ccb0156b04b3bb226c582bf59d196477f3 120776 libwebkdc-perl_4.5.5-2_all.deb
 169b5fc90592de2f4facec45903cf04fdefbb5ecf2607f4e1cd66589730d0a63 62456 webauth-tests_4.5.5-2_all.deb
 07d2377814105b741cf9e62e56188dc87a562ce8cd3181f960126a6ecdc93361 60614 webauth-utils_4.5.5-2_i386.deb
 808a2e368b036af8894e61d4fb13b3c940e6909a8addb70dbc7c09154de7eacd 120926 webauth-weblogin_4.5.5-2_all.deb
Files:
 79c4cc67d9dc89ea0c6402204ee082cf 2082 web optional webauth_4.5.5-2.dsc
 4c331226b4987a589ac6b603013614ee 27840 web optional webauth_4.5.5-2.debian.tar.xz
 b5415158020389c926f29e1a1430b621 224884 httpd optional libapache2-mod-webauth_4.5.5-2_i386.deb
 7e156ef68fd3e33b73b8aff1f48940fd 90702 httpd optional libapache2-mod-webauthldap_4.5.5-2_i386.deb
 6d181855982d60beab53db5a74fd8acc 110364 httpd optional libapache2-mod-webkdc_4.5.5-2_i386.deb
 aee34c74e3d33c4453f5f0639032a0f4 52360 oldlibs extra libapache2-webauth_4.5.5-2_all.deb
 18bf82ba9b349d4a402e25f1d0fbfb0f 51616 oldlibs extra libapache2-webkdc_4.5.5-2_all.deb
 72f3f0cb814c66fa0bfc3637dc233ede 146320 perl optional libwebauth-perl_4.5.5-2_i386.deb
 ce039c69e3e0fbac17f3e3a0823bc54b 84898 libs optional libwebauth10_4.5.5-2_i386.deb
 0ba80f2b216f3559a4ee3ca7e7e9cfe1 100706 libdevel extra libwebauth-dev_4.5.5-2_i386.deb
 6129d4988d6dcb9ea059a53f42adf838 120776 perl optional libwebkdc-perl_4.5.5-2_all.deb
 ad8469fd86b6a7eec3eb03b9f2f9fddc 62456 web optional webauth-tests_4.5.5-2_all.deb
 eb90d67fe92088ae9dea1ad3c5b0378b 60614 web optional webauth-utils_4.5.5-2_i386.deb
 6abf46630ae3f522c309d1cf79fe725f 120926 web optional webauth-weblogin_4.5.5-2_all.deb

Unverified

debian/4.5.5-1

07e3b3a9 · Add changelog entry for new change in 4.5.5 · Aug 28, 2013

Debian release 4.5.5-1

Format: 1.8
Date: Wed, 28 Aug 2013 22:02:11 -0700
Source: webauth
Binary: libapache2-mod-webauth libapache2-mod-webauthldap libapache2-mod-webkdc libapache2-webauth libapache2-webkdc libwebauth-perl libwebauth10 libwebauth-dev libwebkdc-perl webauth-tests webauth-utils webauth-weblogin
Architecture: source i386 all
Version: 4.5.5-1
Distribution: experimental
Urgency: low
Maintainer: Russ Allbery <rra@debian.org>
Changed-By: Russ Allbery <rra@debian.org>
Description:
 libapache2-mod-webauth - Apache module for WebAuth authentication
 libapache2-mod-webauthldap - Apache module for WebAuth LDAP lookup and authorization
 libapache2-mod-webkdc - Apache modules for a WebAuth authentication KDC
 libapache2-webauth - Transitional package for WebAuth Apache modules
 libapache2-webkdc - Transitional package for WebAuth authentication KDC
 libwebauth-dev - Development files for WebAuth authentication
 libwebauth-perl - Perl library for WebAuth authentication
 libwebauth10 - Shared libraries for WebAuth authentication
 libwebkdc-perl - Perl libraries for WebAuth central login server
 webauth-tests - Tests for the WebAuth authentication modules
 webauth-utils - Command-line utilities for WebAuth authentication
 webauth-weblogin - Central login server for WebAuth authentication
Changes:
 webauth (4.5.5-1) experimental; urgency=low
 .
   * New upstream release.
     - Warn about mismatched webkdc-proxy tokens but no longer treat them
       as a fatal error.
     - Fix handling of non-password session factor requirements.
     - Improve handling of initial factor requirements when users have a
       way to establish initial credentials that don't include a password
       factor.
     - Improve handling of a Kerberos webkdc-proxy token requirement during
       a multifactor authentication.
     - Retry WebLogin posts to the WebKDC once to be more robust against
       interruptions by signals (such as from the FastCGI process manager).
     - Produce more succinct and hopefully better error messages when
       WebLogin cannot post to the WebKDC.
     - Ignore SIGPIPE signals in WebLogin scripts.
     - Require the return URL be absolute and not contain non-ASCII
       characters in mod_webkdc processing.
     - Fix WebLogin replay detection logic to not trigger on password
       changes.
     - Work around problems in WebLogin caused by the WebKDC returning
       error messages that contain undeclared non-UTF-8 characters in
       violation of the XML standard.
     - Improve error reporting of unparsable XML received by the WebLogin
       server from the WebKDC.
     - Fix logging of mod_webkdc <requestTokenRequest> failures.
     - Fix the prototype attributes for webauth_user_validate.
     - Log when mod_webkdc ignores expired tokens.
     - Display more correct errors after some failures during the second
       step of a multifactor authentication.
     - Correctly diagnose a missing service token in a WebLogin request and
       report the correct error instead of an internal error.
     - Make the version of all Perl modules match the WebAuth release.
     - Better error display for logins rejected by the user information
       service.
     - Better error display for multifactor authentication errors.
     - Rate limiting and replay detection are now also applied to the
       multifactor login page.
     - Fix replay detection by correcting choice of memcached keys.
     - Support staying on the code entry page after an error when using an
       SMS method for multifactor.  Local template changes are required to
       take advantage of this feature.
Checksums-Sha1:
 9fa165a2b3b8e1a55a0b8e3859e0d992e40889d4 2082 webauth_4.5.5-1.dsc
 e98bda21a1d1ae75e122f46a67b298368e75a1ee 869252 webauth_4.5.5.orig.tar.xz
 d485bdc73d5d096195d3228927ac8b33cf37d2cc 27836 webauth_4.5.5-1.debian.tar.xz
 8b23e375803cefedcc378a27522917c85707fb0f 224858 libapache2-mod-webauth_4.5.5-1_i386.deb
 b0a75985d81c20ca11e7180692ad7a6e6cc2d498 90690 libapache2-mod-webauthldap_4.5.5-1_i386.deb
 7d9fa5258a085600b7c56f186dc7017960d87b16 110364 libapache2-mod-webkdc_4.5.5-1_i386.deb
 45c467444c57bdb869b5efc29ef7f08708a8a210 52350 libapache2-webauth_4.5.5-1_all.deb
 b340abe2c0f86811246a84e06a9361a54574adc0 51612 libapache2-webkdc_4.5.5-1_all.deb
 6705000b0f269f6a57c62130b56a722c5e3b2747 146128 libwebauth-perl_4.5.5-1_i386.deb
 94411a8b705c0c3971ea344e2f9fb3ffb98799f4 84896 libwebauth10_4.5.5-1_i386.deb
 d7e825c4f81606f85fe4724c3c0a688a4ffcdb92 100708 libwebauth-dev_4.5.5-1_i386.deb
 975f0964128e6270e3e17f24bcc0a81b5a270623 120734 libwebkdc-perl_4.5.5-1_all.deb
 333c294e153c8348aba761b9fef36f02119f48df 62444 webauth-tests_4.5.5-1_all.deb
 bc2d08c443d12da6f7d9717fc9231f3c50c495b8 60610 webauth-utils_4.5.5-1_i386.deb
 5bdf0a007a2748ea5671ed6944df22346b2b7e41 120924 webauth-weblogin_4.5.5-1_all.deb
Checksums-Sha256:
 3b6843efc86d4d437d0e1e4d099338e3b8753c915b770342637ccd079f13e5cd 2082 webauth_4.5.5-1.dsc
 bbdc493e58a5d4d92a206f309681410461dd33019bfb3fcd477bf16855e67448 869252 webauth_4.5.5.orig.tar.xz
 757aa9118f37d0c07df94a80d792ea1efac7859ee16f99b01c1762090ab3929e 27836 webauth_4.5.5-1.debian.tar.xz
 5c6ad0b8db07dafa97bb6de4c44687d22684cb8867bc184b4a0ac8e207c07037 224858 libapache2-mod-webauth_4.5.5-1_i386.deb
 c41e268ce31d7662cf6241ffccf3b7ebbd90d8b441b7bdb08a4ba337734535b7 90690 libapache2-mod-webauthldap_4.5.5-1_i386.deb
 c9cd900fa4bdce88938401de840180067a052f716dc739d19fe8b63de9d2ff82 110364 libapache2-mod-webkdc_4.5.5-1_i386.deb
 5dfda4b89112b5565d9df65118ce4df2bd3f46c4d6be1368d5561ebca36db772 52350 libapache2-webauth_4.5.5-1_all.deb
 84934fe39c69d031e644bfef3ed51054bdc2a9f2af4e6adc5e09002444f2ceda 51612 libapache2-webkdc_4.5.5-1_all.deb
 340b25122834c8cc5bcdd92ac72718aac64bc64aaefa92c20e7b99d72b36d6bd 146128 libwebauth-perl_4.5.5-1_i386.deb
 0c8f2d0275c7f5c3eb3d75ae7d11cd57c4e2e41d0a62c397184a57814c0147ea 84896 libwebauth10_4.5.5-1_i386.deb
 f1a76d8cba31eb8260bc26fab99ef25783ba704512710ebd32645b2e96f5b2e3 100708 libwebauth-dev_4.5.5-1_i386.deb
 57494097225368e9548f215f970183b4b209996c4867d66a693e6bfaa0339a2f 120734 libwebkdc-perl_4.5.5-1_all.deb
 50df78aeda4ca48f37d46763bb513907c67d80cda27ca3f66d0abfb7372ab423 62444 webauth-tests_4.5.5-1_all.deb
 becaa835bb395fd4a7330a2952039713cb263f223a741260608914b9c4d7a275 60610 webauth-utils_4.5.5-1_i386.deb
 a6e50ef42439067cf0e36e42423d84b51829b66793d12570b55ecfb1389f250a 120924 webauth-weblogin_4.5.5-1_all.deb
Files:
 61a70c298836dbf1a214a7d703405b5b 2082 web optional webauth_4.5.5-1.dsc
 41db9df36decd67eda39da930267b879 869252 web optional webauth_4.5.5.orig.tar.xz
 f9bec9265a6572e512f5004f4051b627 27836 web optional webauth_4.5.5-1.debian.tar.xz
 392c9683305764a8686bf6394fd2035e 224858 httpd optional libapache2-mod-webauth_4.5.5-1_i386.deb
 41499bed315824f963375987e24c4fae 90690 httpd optional libapache2-mod-webauthldap_4.5.5-1_i386.deb
 0e78019387e9c98c26e3e67bc5ba28e7 110364 httpd optional libapache2-mod-webkdc_4.5.5-1_i386.deb
 e93b79f0e4cdc6483567a4a54ed6d48e 52350 oldlibs extra libapache2-webauth_4.5.5-1_all.deb
 6d89b4af418c24c422dbca3a492e3a86 51612 oldlibs extra libapache2-webkdc_4.5.5-1_all.deb
 043ee54ee0956416989a54d1fcb385ce 146128 perl optional libwebauth-perl_4.5.5-1_i386.deb
 c925986af1685d8930b72a0a9437462f 84896 libs optional libwebauth10_4.5.5-1_i386.deb
 8ff2350b2d2c3e8f8a4f175cefa4d413 100708 libdevel extra libwebauth-dev_4.5.5-1_i386.deb
 5aa7922f133b18a72be3220adc0c8a85 120734 perl optional libwebkdc-perl_4.5.5-1_all.deb
 c495646e901f6e3c529cc5932b45c5ee 62444 web optional webauth-tests_4.5.5-1_all.deb
 f1e8b1ae5e6c55282fc68cbbba7e9cb4 60610 web optional webauth-utils_4.5.5-1_i386.deb
 5f704e79fcad8f4b92018c142ac2c777 120924 web optional webauth-weblogin_4.5.5-1_all.deb

Unverified

debian/4.5.5-1_bpo60+1

75d63007 · Update date of 4.5.5 backport · Aug 28, 2013

Debian release 4.5.5-1~bpo60+1

Format: 1.8
Date: Wed, 28 Aug 2013 22:02:39 -0700
Source: webauth
Binary: libapache2-webauth libapache2-webkdc libwebauth-perl libwebauth10 libwebauth-dev libwebkdc-perl webauth-tests webauth-utils webauth-weblogin
Architecture: all amd64 i386 source
Version: 4.5.5-1~bpo60+1
Distribution: squeeze-backports
Urgency: low
Maintainer: Russ Allbery <rra@debian.org>
Changed-By: Russ Allbery <rra@debian.org>
Description:
 libapache2-webauth - Apache modules for WebAuth authentication
 libapache2-webkdc - Apache 2 modules for a WebAuth authentication KDC
 libwebauth-dev - Development files for WebAuth authentication
 libwebauth-perl - Perl library for WebAuth authentication
 libwebauth10 - Shared libraries for WebAuth authentication
 libwebkdc-perl - Perl libraries for WebAuth central login server
 webauth-tests - Tests for the WebAuth authentication modules
 webauth-utils - Command-line utilities for WebAuth authentication
 webauth-weblogin - Central login server for WebAuth authentication
Changes:
 webauth (4.5.5-1~bpo60+1) squeeze-backports; urgency=low
 .
   * Backport to squeeze.
   * Revert the changes to README.Debian.
   * Remove AM_PROG_AR from configure.ac.  This is not available with the
     squeeze versions of Autoconf and Automake, and was only added for Hurd
     portability (which isn't important for backports).
   * Revert transition to Apache 2.4, use of the new Apache module helper
     functions, and multi-arch.
   * Drop dh_autoreconf --as-needed flag, which is not supported by the
     version of dh_autoreconf in squeeze.
Checksums-Sha1:
 220139a01841c3bc62d841706c96d6b1235c6dc8 2329 webauth_4.5.5-1~bpo60+1.dsc
 efa3b308666ac9b046372708dfcbaa00984b7606 28548 webauth_4.5.5-1~bpo60+1.debian.tar.xz
 bee2198fdca6de7395d6fb2dffd386b32ec9b033 234166 libapache2-webauth_4.5.5-1~bpo60+1_i386.deb
 dc709308579d2d7fae129dbac401fc16239a739b 110824 libapache2-webkdc_4.5.5-1~bpo60+1_i386.deb
 b6172a627adb661ff2fdac16e0e61613b1ffe64f 149326 libwebauth-perl_4.5.5-1~bpo60+1_i386.deb
 bc9353d9778fce635eea3eafb27ecddaac8023ba 83918 libwebauth10_4.5.5-1~bpo60+1_i386.deb
 3f0961f46992d5d8f18769a89d20fb81466495dd 99186 libwebauth-dev_4.5.5-1~bpo60+1_i386.deb
 3454d339cb96947e621443641306da1b4e0aedfb 120294 libwebkdc-perl_4.5.5-1~bpo60+1_all.deb
 4ff1b361b8c1132dd00ab2cf2dda2f57c4956c76 62642 webauth-tests_4.5.5-1~bpo60+1_all.deb
 e2586c12f9bc60406214d3165c40ca9b490794d3 60254 webauth-utils_4.5.5-1~bpo60+1_i386.deb
 42aecd15a28f8b3b5a29a77342c6986e5aaa277d 121114 webauth-weblogin_4.5.5-1~bpo60+1_all.deb
 2ed2467f22366a25fe8e311bf088d47bf3b2f874 236464 libapache2-webauth_4.5.5-1~bpo60+1_amd64.deb
 bf0488495398afdc649c0ff1744a9ef76e1e42a1 111714 libapache2-webkdc_4.5.5-1~bpo60+1_amd64.deb
 df58c0aad037bece9d740cc132bba726b62921ff 149668 libwebauth-perl_4.5.5-1~bpo60+1_amd64.deb
 dd72a1ac84c9eea00d5faf1615633025bc716753 86146 libwebauth10_4.5.5-1~bpo60+1_amd64.deb
 bc73bfdce83aa55be6c11ecbf09cc4919b48bec7 103312 libwebauth-dev_4.5.5-1~bpo60+1_amd64.deb
 8b197cf72e6628b160463404282677a4368229ab 61572 webauth-utils_4.5.5-1~bpo60+1_amd64.deb
Checksums-Sha256:
 68defaad547212f6d1c8a1f80e7e761c723f7deccaf5c3b646f054db67ea2a9f 2329 webauth_4.5.5-1~bpo60+1.dsc
 3a40f426debeb98613bb0d1d81e95e185028ca498d133c4e0b951930b19c4c3b 28548 webauth_4.5.5-1~bpo60+1.debian.tar.xz
 74ae3a1228c6bda97fdc5ca9d79344794688be628934d678069262d14ddc776b 234166 libapache2-webauth_4.5.5-1~bpo60+1_i386.deb
 3c10f2abed6bcc05bc063f867e41e4a4c7233198fe66baa7c4fbb96981dfd4b8 110824 libapache2-webkdc_4.5.5-1~bpo60+1_i386.deb
 6159c6571532af81ed9fcd59d3160c91f54db9458156d346ec7668a796541f3f 149326 libwebauth-perl_4.5.5-1~bpo60+1_i386.deb
 3d50c95b45554cceca66694bb180d9edff29e584d64c68111e77d1c0e3146e9f 83918 libwebauth10_4.5.5-1~bpo60+1_i386.deb
 2ef465738c309e5766578e121e98bc7f35c86917116a8d5788f9db75ccaf6f3a 99186 libwebauth-dev_4.5.5-1~bpo60+1_i386.deb
 6b105ab00a069ade3d60756ec09335594238e9d4c500414766a7e10782d98585 120294 libwebkdc-perl_4.5.5-1~bpo60+1_all.deb
 f411127d82ccd9de255b2a8d228098117e8c5901ed1b9af605ca21a90519c1a5 62642 webauth-tests_4.5.5-1~bpo60+1_all.deb
 f9e98ffc278634ca3f030434f8bc5c6e407cdecd9075e836574087d53fa4b109 60254 webauth-utils_4.5.5-1~bpo60+1_i386.deb
 a42e4126c749b9bafe64f2f41729dddf510f09bdaf7803951d22c66ecf220684 121114 webauth-weblogin_4.5.5-1~bpo60+1_all.deb
 2266680486da351521a9bba2e40bff4815e058c9827a720aa3e6cc0a057a38c3 236464 libapache2-webauth_4.5.5-1~bpo60+1_amd64.deb
 904314a870cc88bf2453eb2358fed34219f8165da605359d3d85f8db5ab6a5d0 111714 libapache2-webkdc_4.5.5-1~bpo60+1_amd64.deb
 5c220298d3c561a58ffe2b187cbcac20110c5c68bb7d12bf18afe7e75c59c195 149668 libwebauth-perl_4.5.5-1~bpo60+1_amd64.deb
 1bfd3151c82397d2ee3f1a3020fb0319f10eafb8a0412f1c3ee91939c99dca80 86146 libwebauth10_4.5.5-1~bpo60+1_amd64.deb
 a35462ad3879cf3f44acb9d6e56aa360f9d05f5a8b04f38bd2b455c6c73c65de 103312 libwebauth-dev_4.5.5-1~bpo60+1_amd64.deb
 ae11d047f010d3ee9066afd79a8fa21b33a61f1f51e212d2fc634f5467fa718b 61572 webauth-utils_4.5.5-1~bpo60+1_amd64.deb
Files:
 c1068226d81abd34326be7f164a371ba 2329 web optional webauth_4.5.5-1~bpo60+1.dsc
 cd856b08b81e9fd43ad16d7335422131 28548 web optional webauth_4.5.5-1~bpo60+1.debian.tar.xz
 e77ef5cb603f74926ffe988399496c8c 234166 httpd optional libapache2-webauth_4.5.5-1~bpo60+1_i386.deb
 0ff386e3c833ef28eee1afedc5768c86 110824 httpd optional libapache2-webkdc_4.5.5-1~bpo60+1_i386.deb
 dd0b6744a4d2f736f6200b124802f262 149326 perl optional libwebauth-perl_4.5.5-1~bpo60+1_i386.deb
 77f1bbbbd4a11fa934fd097028c493e0 83918 libs optional libwebauth10_4.5.5-1~bpo60+1_i386.deb
 b67ca9763ebd588ccb07edf3188dbcd2 99186 libdevel extra libwebauth-dev_4.5.5-1~bpo60+1_i386.deb
 a95fa361b5db55665d70ce2639fbb6f0 120294 perl optional libwebkdc-perl_4.5.5-1~bpo60+1_all.deb
 80242e1bad9f3181d780cfa3faf5be88 62642 web optional webauth-tests_4.5.5-1~bpo60+1_all.deb
 0188b25cb2a2869315ddb41a1827f4af 60254 web optional webauth-utils_4.5.5-1~bpo60+1_i386.deb
 60c45714024c7c6d713b84da29a35b89 121114 web optional webauth-weblogin_4.5.5-1~bpo60+1_all.deb
 d68b3ab91f0133b68e909d1f098c5b60 236464 httpd optional libapache2-webauth_4.5.5-1~bpo60+1_amd64.deb
 669caea0c5e426392e6822bb920f2d23 111714 httpd optional libapache2-webkdc_4.5.5-1~bpo60+1_amd64.deb
 3852758afca7bda3fec28be49de98f99 149668 perl optional libwebauth-perl_4.5.5-1~bpo60+1_amd64.deb
 dcee7df277fcf805bba0c5436007fd28 86146 libs optional libwebauth10_4.5.5-1~bpo60+1_amd64.deb
 dfb197651e9bbf92e7d8b8003d7fea58 103312 libdevel extra libwebauth-dev_4.5.5-1~bpo60+1_amd64.deb
 f9ebdd15d68eed823e843cbdf173e772 61572 web optional webauth-utils_4.5.5-1~bpo60+1_amd64.deb

Unverified

upstream/4.5.5

8ac77d30 · Imported Upstream version 4.5.5 · Aug 28, 2013
```
Upstream version 4.5.5
```
release/4.5.5

13eaa2d5 · Don't restart the SMS multifactor process on an error · Aug 28, 2013
```
WebAuth release 4.5.5
```
Unverified

debian/4.5.4-1_bpo60+2

40042b91 · Fix the dependencies of libwebkdc-perl for squeeze · Aug 19, 2013

Debian release 4.5.4-1~bpo60+1

Format: 1.8
Date: Mon, 19 Aug 2013 20:02:08 -0700
Source: webauth
Binary: libapache2-webauth libapache2-webkdc libwebauth-perl libwebauth10 libwebauth-dev libwebkdc-perl webauth-tests webauth-utils webauth-weblogin
Architecture: all amd64 i386 source
Version: 4.5.4-1~bpo60+2
Distribution: squeeze-backports
Urgency: low
Maintainer: Russ Allbery <rra@debian.org>
Changed-By: Russ Allbery <rra@debian.org>
Description:
 libapache2-webauth - Apache modules for WebAuth authentication
 libapache2-webkdc - Apache 2 modules for a WebAuth authentication KDC
 libwebauth-dev - Development files for WebAuth authentication
 libwebauth-perl - Perl library for WebAuth authentication
 libwebauth10 - Shared libraries for WebAuth authentication
 libwebkdc-perl - Perl libraries for WebAuth central login server
 webauth-tests - Tests for the WebAuth authentication modules
 webauth-utils - Command-line utilities for WebAuth authentication
 webauth-weblogin - Central login server for WebAuth authentication
Changes:
 webauth (4.5.4-1~bpo60+2) squeeze-backports; urgency=low
 .
   * Fix the dependencies of libwebkdc-perl for squeeze.
Checksums-Sha1:
 5cf535ef494436974e7013c07c52e2d84b6849ad 2329 webauth_4.5.4-1~bpo60+2.dsc
 d1a703adfe6798ef93a2a43bd784dd19936aaf2a 28392 webauth_4.5.4-1~bpo60+2.debian.tar.xz
 95a79ea97fe75994a5fc05ed874c3fbd2fc948f8 233504 libapache2-webauth_4.5.4-1~bpo60+2_i386.deb
 f58f900408455704edc610280866064bc1d2131f 110228 libapache2-webkdc_4.5.4-1~bpo60+2_i386.deb
 77d328de2cc02f93d9d6edd4e80996622d0758cc 148682 libwebauth-perl_4.5.4-1~bpo60+2_i386.deb
 135ea8cfd17063af93a080059ba8fde23b16fca7 83346 libwebauth10_4.5.4-1~bpo60+2_i386.deb
 1425de709dbabb6407a90eed24ea73fbbac6f6fd 98570 libwebauth-dev_4.5.4-1~bpo60+2_i386.deb
 a9570590cf56cd095f3a1deb59cdfee41b0e0ef4 119750 libwebkdc-perl_4.5.4-1~bpo60+2_all.deb
 71061de1de64dfb9e0feac50ddc673e2347a9f36 62140 webauth-tests_4.5.4-1~bpo60+2_all.deb
 a1b6b4cb3236f35fa87c78b4fb4a75432a12946d 59746 webauth-utils_4.5.4-1~bpo60+2_i386.deb
 7e338c56984a5a2f3c6c40ce2e32ee852c27e0b8 120510 webauth-weblogin_4.5.4-1~bpo60+2_all.deb
 b46d948f2c1693c9edfdad9c9456050cd8814f6c 235880 libapache2-webauth_4.5.4-1~bpo60+2_amd64.deb
 c8987088feb749b1328c82ef3962fc920c607598 111132 libapache2-webkdc_4.5.4-1~bpo60+2_amd64.deb
 0f9288dda7b91b28720742b6a15c11619cbc7c62 149130 libwebauth-perl_4.5.4-1~bpo60+2_amd64.deb
 2295ea30bb0d9e0ed3ea70f4e9a380614a3454a3 85560 libwebauth10_4.5.4-1~bpo60+2_amd64.deb
 a8b8ad761c976a6a51bc98234edd52e7a92b4d77 102804 libwebauth-dev_4.5.4-1~bpo60+2_amd64.deb
 dd7581c8df1b80de6a344a6a23c5343a325fdaa0 61062 webauth-utils_4.5.4-1~bpo60+2_amd64.deb
Checksums-Sha256:
 99396e1f41dec86d3e937a44b3131f001d2721a203f139c32ed51f6996d6f8af 2329 webauth_4.5.4-1~bpo60+2.dsc
 f4965231fbdaf174c12c55b5eca0d628d8e42940f8e684f6fb4ceb49c2b8c278 28392 webauth_4.5.4-1~bpo60+2.debian.tar.xz
 c014c1a751803dc787b78c1af3e0c52e3013773ed303e618ef8a2659ade43e11 233504 libapache2-webauth_4.5.4-1~bpo60+2_i386.deb
 619cc0a11ba2c580c110394810185c5d7d0f0abe451ef1545426ca620d4fa658 110228 libapache2-webkdc_4.5.4-1~bpo60+2_i386.deb
 f81a0324b79df9eaac13858a5bd2e5a8317c25b48f30dc79160808e4ece079e5 148682 libwebauth-perl_4.5.4-1~bpo60+2_i386.deb
 5c0202f2d3c61e461fd2659c27a3ead3b782fac21ee9038eac6abb2406d89dae 83346 libwebauth10_4.5.4-1~bpo60+2_i386.deb
 393a2720ef791785b0003d3a57a7a0a4a98fe3f78b606f3893f0ebf8a31f798a 98570 libwebauth-dev_4.5.4-1~bpo60+2_i386.deb
 ffdc0b4d7cb5f1cb9f86af6c0fef9edd3ca973eb11d781bdb22279f00a373106 119750 libwebkdc-perl_4.5.4-1~bpo60+2_all.deb
 d4af95dc3a4530c66e7308d8db00b27fe146d114e8615badd53f9f94d6fe3e6d 62140 webauth-tests_4.5.4-1~bpo60+2_all.deb
 cfc29de206a528d76bedc2baeac2639a1c1cac92e57a8482d9a809e10f191c34 59746 webauth-utils_4.5.4-1~bpo60+2_i386.deb
 6dd6ee9c2a5070a11851f09776ebda8805581ad42ea946e057e46015f785b802 120510 webauth-weblogin_4.5.4-1~bpo60+2_all.deb
 806308d60b9ce0ba1d7b818d6b703acb52121faa57b49548b48d8140d318ce08 235880 libapache2-webauth_4.5.4-1~bpo60+2_amd64.deb
 3a6a52b9cef6f0e686cde60c7f45955fee7449f56348c4afae2cdfd82887223a 111132 libapache2-webkdc_4.5.4-1~bpo60+2_amd64.deb
 d4f7194ea380a6c7a37b4c99ced48825f562d09e3dfdc807c2bc6aab8b99676e 149130 libwebauth-perl_4.5.4-1~bpo60+2_amd64.deb
 2d2e31819b633530e1ba6aeee3434af8e10b774232a6871649a1abd66716221b 85560 libwebauth10_4.5.4-1~bpo60+2_amd64.deb
 3fbc4f8914b081c07795b8a22cd71050061f11da4d21f976a5e61f04a18b6451 102804 libwebauth-dev_4.5.4-1~bpo60+2_amd64.deb
 060a662e15c839414e4edc8cd2544cd1219141dc5b730d6e8396a90ea446852f 61062 webauth-utils_4.5.4-1~bpo60+2_amd64.deb
Files:
 673ed8637aa14c97d6fbfa908cd0f328 2329 web optional webauth_4.5.4-1~bpo60+2.dsc
 4f25c92bc32e2e69057185584d260e16 28392 web optional webauth_4.5.4-1~bpo60+2.debian.tar.xz
 963b31a5597e0bd933b1b5541a6a2343 233504 httpd optional libapache2-webauth_4.5.4-1~bpo60+2_i386.deb
 484356f174b93da024d2188b27ec9a87 110228 httpd optional libapache2-webkdc_4.5.4-1~bpo60+2_i386.deb
 002f99c150f36efdc9f34caa7214befd 148682 perl optional libwebauth-perl_4.5.4-1~bpo60+2_i386.deb
 568cba1775b1b86754dae49b4451e573 83346 libs optional libwebauth10_4.5.4-1~bpo60+2_i386.deb
 37301f069b474ce2962e99cdc97b6d74 98570 libdevel extra libwebauth-dev_4.5.4-1~bpo60+2_i386.deb
 d6f33f58b4863b14d7180b18b95fe127 119750 perl optional libwebkdc-perl_4.5.4-1~bpo60+2_all.deb
 7902ccd3abe9035ad8e1aa6ff4012fc5 62140 web optional webauth-tests_4.5.4-1~bpo60+2_all.deb
 5cb5ff41decb78fb313607902e3e92b4 59746 web optional webauth-utils_4.5.4-1~bpo60+2_i386.deb
 73ba050ba1bbf08ac51495ff8a0575a8 120510 web optional webauth-weblogin_4.5.4-1~bpo60+2_all.deb
 c0d731ccef7047bbf15db5e1594a4991 235880 httpd optional libapache2-webauth_4.5.4-1~bpo60+2_amd64.deb
 ef64da52bccf0eb7844c4b6b5ecf5c12 111132 httpd optional libapache2-webkdc_4.5.4-1~bpo60+2_amd64.deb
 e0d7c31652229b960b3966c27ab1526f 149130 perl optional libwebauth-perl_4.5.4-1~bpo60+2_amd64.deb
 099b7c8d2d3c64b3ed91647f11bab9fb 85560 libs optional libwebauth10_4.5.4-1~bpo60+2_amd64.deb
 bbf71f12d436e9fff062c5a26a2d7332 102804 libdevel extra libwebauth-dev_4.5.4-1~bpo60+2_amd64.deb
 ecc8e21b02ab9fd2980f638941035110 61062 web optional webauth-utils_4.5.4-1~bpo60+2_amd64.deb

Unverified

debian/4.5.4-1_bpo60+1

576db3d2 · Consolidate all backport changelog entries · Aug 18, 2013

Debian release 4.5.4-1~bpo60+1

Format: 1.8
Date: Sun, 18 Aug 2013 18:43:16 -0700
Source: webauth
Binary: libapache2-webauth libapache2-webkdc libwebauth-perl libwebauth10 libwebauth-dev libwebkdc-perl webauth-tests webauth-utils webauth-weblogin
Architecture: all amd64 i386 source
Version: 4.5.4-1~bpo60+1
Distribution: squeeze-backports
Urgency: low
Maintainer: Russ Allbery <rra@debian.org>
Changed-By: Russ Allbery <rra@debian.org>
Closes: 666861 691878 705557 713452 714602
Description:
 libapache2-webauth - Apache modules for WebAuth authentication
 libapache2-webkdc - Apache 2 modules for a WebAuth authentication KDC
 libwebauth-dev - Development files for WebAuth authentication
 libwebauth-perl - Perl library for WebAuth authentication
 libwebauth10 - Shared libraries for WebAuth authentication
 libwebkdc-perl - Perl libraries for WebAuth central login server
 webauth-tests - Tests for the WebAuth authentication modules
 webauth-utils - Command-line utilities for WebAuth authentication
 webauth-weblogin - Central login server for WebAuth authentication
Changes:
 webauth (4.5.4-1~bpo60+1) squeeze-backports; urgency=low
 .
   * Backport to squeeze.
   * Revert the changes to README.Debian.
   * Remove AM_PROG_AR from configure.ac.  This is not available with the
     squeeze versions of Autoconf and Automake, and was only added for Hurd
     portability (which isn't important for backports).
   * Revert transition to Apache 2.4, use of the new Apache module helper
     functions, and multi-arch.
   * Drop dh_autoreconf --as-needed flag, which is not supported by the
     version of dh_autoreconf in squeeze.
 .
 webauth (4.5.4-1) unstable; urgency=low
 .
   * New upstream release.
     - Warn about mismatched webkdc-proxy tokens but no longer treat them
       as a fatal error.
     - Fix handling of non-password session factor requirements.
     - Improve handling of initial factor requirements when users have a
       way to establish initial credentials that don't include a password
       factor.
     - Improve handling of a Kerberos webkdc-proxy token requirement during
       a multifactor authentication.
     - Retry WebLogin posts to the WebKDC once to be more robust against
       interruptions by signals (such as from the FastCGI process manager).
     - Produce more succinct and hopefully better error messages when
       WebLogin cannot post to the WebKDC.
     - Ignore SIGPIPE signals in WebLogin scripts.
     - Require the return URL be absolute and not contain non-ASCII
       characters in mod_webkdc processing.
     - Fix WebLogin replay detection logic to not trigger on password
       changes.
     - Work around problems in WebLogin caused by the WebKDC returning
       error messages that contain undeclared non-UTF-8 characters in
       violation of the XML standard.
     - Improve error reporting of unparsable XML received by the WebLogin
       server from the WebKDC.
     - Fix logging of mod_webkdc <requestTokenRequest> failures.
     - Fix the prototype attributes for webauth_user_validate.
     - Log when mod_webkdc ignores expired tokens.
     - Display more correct errors after some failures during the second
       step of a multifactor authentication.
     - Correctly diagnose a missing service token in a WebLogin request and
       report the correct error instead of an internal error.
     - Make the version of all Perl modules match the WebAuth release.
 .
 webauth (4.5.3-5) unstable; urgency=low
 .
   * Only remove /var/lib/webauth during purge if the directory exists.
     Both libapache2-mod-webauth and libapache2-mod-webauthldap create and
     use that directory, so it may have already been removed by the other
     package.  (Closes: #714602)
 .
 webauth (4.5.3-4) unstable; urgency=low
 .
   * Apply upstream patch to fix incorrect linkage of some of the test
     programs.  (Closes: #713452)
 .
 webauth (4.5.3-3) unstable; urgency=low
 .
   * Move mod_webauthldap into a separate libapache2-mod-webauthldap
     package.  This permits better dependencies, more closely conforms to
     the Apache module naming convention, and allows users who aren't
     interested in the LDAP module to easily remove it.  Note that the
     libapache2-mod-webauth package does not attempt to clean up
     configuration files left behind from the mod_webauthldap module, since
     nearly all users upgrading from an older version will end up with both
     packages installed, and removal of libapache2-mod-webauthldap will do
     the right thing.  Additional cleanup would only be needed for people
     upgrading from experimental versions of libapache2-mod-webauth who do
     not install libapache2-mod-webauthldap and doesn't seem worth the
     complexity.
   * Add proper Breaks/Replaces for the Apache module package renaming.
   * Pass LDFLAGS from the main build to the Perl module build so that the
     hardening flags are set properly.
 .
 webauth (4.5.3-2) unstable; urgency=low
 .
   * Upload to unstable.
   * Now that dh_apache2 has an option to not enable the modules by
     default, let it handle all module setup for libapache2-mod-webauth
     except for the Apache restart and remove the now-unnecessary prerm
     script.
   * Simplify libcgi-application-perl Depends and Build-Depends by dropping
     the alternatives that were required for squeeze.
   * Add build dependency on dh-apache2 per the dh_apache2 manual page.
 .
 webauth (4.5.3-1) experimental; urgency=low
 .
   * New upstream release.
     - SECURITY: Clear header state between requests to avoid information
       leaks or infinite redirects for WebLogin servers using FastCGI and
       $REMUSER_REDIRECT (not the default).  The vulnerability was
       introduced in WebAuth 4.4.1.  All versions of WebAuth with this
       vulnerability were only uploaded to Debian experimental.
       (CVE-2013-2106)
 .
 webauth (4.5.2-1) experimental; urgency=low
 .
   * New upstream release.
     - WebLogin now supports preserving remember_login on authentication
       failure.  Template changes are required.
     - Fix clearing of failed authentication attempts on successful auth.
     - Fix setting cookies on the WebLogin error page.
     - Stop clearing single sign-on cookies on cookie test redirect.
   * Recommend the GSS-API SASL module packages for mod_webauthldap and
     document their need in README.Debian.
   * Update the Debian-specific installation instructions to reference
     conf-available and a2enconf instead of /etc/apache2/conf.d.
 .
 webauth (4.5.1-1) experimental; urgency=low
 .
   * New upstream release.
     - Fix support for single sign-on in WebLogin, broken in 4.5.0.
     - Document additional template changes required for remember_login.
     - Preserve remember_login through a forced password change.
     - Pass any user information service message to the confirm template.
     - Avoid re-creating WebAuth cookies unnecessarily in WebLogin.
     - Fix a few bugs in the installable mod_webauth test suite.
   * Increase Breaks and minimum dependency versions between the WebLogin
     components to 4.5.0.
   * Remove a stray Debian revision in the libwebauth10 symbols file.
 .
 webauth (4.5.0-1) experimental; urgency=low
 .
   * New upstream release.
     - WebLogin now supports indicating, on the login form template,
       whether to create single sign-on cookies.  The default form sends a
       parameter saying to do so, but the default behavior is to not create
       the cookies.  This will require a template change for most WebLogin
       deployments.
     - Revert change in WebAuthForceLogin interpretation introduced in
       WebAuth 4.4.0.  It once again requires authentication with a login
       token.  Document that it will not work well with authorization
       identities set after authentication.
     - Fix password change handling in WebLogin, broken since 4.4.0.
     - Fix reporting of password rejection reasons, broken since 4.3.0.
     - mod_webauth and mod_webkdc now produce much better error logs.
     - Initial multifactor no longer satisfies a requirement for random
       session multifactor, correcting a long-standing bug.
     - New WebAuthLdapOperationalAttribute directive for mod_webauthldap
       that allows inclusion of operational attributes in the environment.
     - WebLogin no longer supports obtaining the password expiration from a
       kadmin-remctl backend via a direct remctl call.  Instead, it uses
       the value from the WebKDC, which comes from the user information
       service.
     - The WebLogin confirmation page supports a new expire_timestamp
       variable, which contains the password expiration in seconds since
       UNIX epoch.  This should be used instead of the (deprecated)
       expire_date variable since it isn't preformatted and can therefore
       be localized.  See the sample confirm.tmpl template for how to
       format the date for display.
     - New support for persistent cookies containing additional factors,
       controlled by the user information service.
     - The WebKDC now passes the user's current factors to the user
       information service as an additional parameter to the userinfo
       call, which can be used to change behavior based on whether the user
       has persistent factors set.
     - The user information service can now return a specific set of
       required factors instead of just indicating multifactor is required.
     - The user information service can return a message for display in
       the multifactor authentication page in WebLogin (and that has been
       added to the default templates).
     - The user information service can, in both the userinfo and validate
       calls, return an opaque data structure to WebLogin, and WebLogin can
       send an opaque data structre back in the validate call.  This allows
       for multistep multifactor interactions outside of WebAuth's
       knowledge, such as resynchronization of hardware tokens.
     - The user information service can add factors to a user's successful
       interactive authentication.
     - WebLogin and the multifactor page template now receive a list of the
       factors a user needs but doesn't yet have, instead of just a
       complete list of the desired factors.
     - WebLogin can now tell the WebKDC and, in turn, the user information
       service what type of OTP authentication was used, if it knows.
     - The user information service can indicate the expiration time of
       factors resulting from an OTP authentication.
     - Errors in contacting the user information service are now logged
       even if the WebKDC is configured to ignore those errors.
     - Multiple changes to the libwebauth API, most notably revisions to
       the webkdc_login and userinfo APIs and a new opaque factors data
       type.
     - mod_webkdc no longer supports obtaining proxy tokens via a
       <getTokenRequest> call.  This was never used and is conceptually
       useless.
     - undef arguments to Perl XS functions are now properly diagnosed.
   * Fix some incorrect URLs in the webauth-tests package that were left
     over from the test suite rewrite.
   * Use an uppercase realm name in the token.acl example in README.Debian
     for libapache2-mod-webkdc.  Nearly all Kerberos realms will be
     uppercase and the realm is case-sensitive.  Thanks to Lisandro Damián
     Nicanor Pérez Meyer for the report.  (Closes: #705557)
 .
 webauth (4.4.3-1) experimental; urgency=low
 .
   * New upstream release.
     - Fix WebAuthTrustAuthzIdentity to not enable WebAuthDoLogout.
     - Correctly handle an authorization identity equal to the
       authentication identity rather than rejecting it with an error.
     - Remove an arbitrary mod_webauthldap limit in the number of values
       of a multivalued attribute will be exposed in the environment.
     - Fix a syntax error in replay handling in the default WebLogin
       template.
     - Ignore empty app cookies in mod_webauth instead of logging an
       error.  These are created internally by mod_webauth when the app
       cookie has expired.
     - Better mod_webauth logging when the user's app cookie has expired.
     - Stop logging the binary app token in mod_webauth.
     - Fix some obscure error handling cases caught by clang --analyze.
   * Use the new -q flag to a2query when probing for whether mod_webauth
     or mod_webauthldap are enabled, and depend on the appropriate version
     of apache2.
   * Let dh_apache2 handle configuration of libapache2-mod-webkdc now that
     we can tell it to skip libapache2-mod-webauth, and build-depend on the
     appropriate version of apache2-dev.
 .
 webauth (4.4.2-1) experimental; urgency=low
 .
   * New upstream release.
     - Fix an occasional WebKDC crash when determining if an authentication
       is interactive.  Should fix FTBFS on powerpc.
     - Add additional Autoconf checks to hopefully build on Hurd.
 .
 webauth (4.4.1-1) experimental; urgency=low
 .
   * New upstream release.
     - New authenticate callback supported in WebLogin configuration.
     - WebLogin should now run more efficiently under FastCGI.
 .
 webauth (4.4.0-1) experimental; urgency=low
 .
   * New upstream release.
     - New authorization identity support in all components of WebAuth.
     - New WebKdcLoginTimeLimit directive for mod_webkdc to control the
       time limit for multistage login and when a recent login no longer
       counts towards session factors.
     - WebAuthForceLogin no longer forces re-authentication if the last
       authentication was within WebKdcLoginTimeLimit.
     - WebLogin now optionally supports replay detection and rate limiting
       of failed login attempts.  This support requires a memcached server
       to store the relevant data.
     - The WebLogin error template now takes two new parameters for errors
       related to replays and rate limiting.
     - Set single sign-on cookies in WebLogin if appropriate even when
       displaying an error.  This fixes looping issues with site
       restrictions done via the user innformation service.
     - The WebLogin configuration options @REMUSER_LOCAL_REALMS and
       @REMUSER_PERMITTED_REALMS replace @REMUSER_REALMS.  The latter is
       supported for backward compatibility.
     - Multiple fixes for encoding of Kerberos credentials.
     - Fix mapping of WebKDC error codes to names in WebLogin.
     - Document the WebAuthRequireSSL directive.
     - webauth_token_{encrypt,decrypt} are now part of the public API.
     - webauth_base64_*, webauth_hex_*, webauth_attr_*, and webauth_attrs_*
       functions are no longer part of the public API.
     - The webauth.h header has been removed.  Use the more specific
       webauth/*.h headers.
     - New public webauth_keyring_encode and webauth_keyring_decode
       functions and corresponding Perl API to handle keyring serialization
       without requiring that it be done to a file.
     - The WA_TK_*, WA_TT_*, and WA_SA_* preprocessor constants are no
       longer provided.  They weren't useful.
     - The WA_ERR_KEYRING_* error codes have changed to WA_ERR_FILE_* and
       new error code WA_ERR_FILE_NOT_FOUND has been added.
   * Update standards version to 3.9.4.
     - Update Vcs-Git to specify the Debian packaging branch.
 .
 webauth (4.3.3-1) experimental; urgency=low
 .
   * New upstream release.
     - Fix memory initialization error in the WebKDC that could cause
       incorrect handling of random multifactor verification.
     - Fix memory allocation error in the WebAuth Perl module that could
       cause memory corruption in the WebLogin server.
   * Add Breaks of libwebkdc-perl and webauth-weblogin << 4.3.0 to
     libwebauth-perl and of webauth-weblogin << 4.3.0 to libwebkdc-perl.
     The API of the Perl modules changed in 4.3.0.  (Closes: #691878)
   * Remove ~ on 4.3.0 dependencies.  There were no pre-release versions,
     so this is just visual clutter.
   * Drop Replaces and Breaks on libwebauth1-dev, not required since the
     squeeze release.
 .
 webauth (4.3.2-1) experimental; urgency=low
 .
   * New upstream release.
     - Fix memory pool allocation error in mod_webauth that could prevent
       it from obtaining a service token from the WebKDC.
 .
 webauth (4.3.1-1) experimental; urgency=low
 .
   * New upstream release.
     - WebAuthDoLogout is now allowed in .htaccess via AuthConfig.
     - Fix an invalid free in webauth_webkdc_login.
     - Fix incorrect Perl module includes in pwchange.fcgi.
     - Add an overloaded cmp operator for WebAuth::Exception.
   * Tighten the dependencies between the Perl modules and WebLogin.
 .
 webauth (4.3.0-1) experimental; urgency=low
 .
   * New upstream release.
     - mod_webauth now sets HttpOnly on cookies by default.  There is a new
       WebAuthHttpOnly flag to disable this behavior.
     - WebLogin now sets HttpOnly on all cookies.
     - Add new optional <userMessage> element to <requestTokenResponse>
       from the WebKDC and a new error code to indicate that this HTML
       error should be displayed to the user.
     - Support an <error> return element from the user information
       service and pass it as the <userMessage> element.
     - Add WebLogin support via an err_html parameter to display the error
       returned in the <userMessage> element from the WebKDC.
     - Change all Kerberos functions in the WebAuth library API to take the
       WebAuth context and use APR.  Remove some unused functions, merge
       others, and rename others.  Update the Perl API to match.  Any Perl
       programs that call WebAuth Kerberos functions will require updates.
     - Fix decoding of Kerberos credentials with a second ticket.
     - Kerberos realms are no longer escaped before matching them against
       the Apache configuration.  This only affects handling of realm names
       with unusual characters.
   * Mark webauth-tests and webauth-weblogin as Multi-Arch: foreign.  This
     is necessary even for arch: all packages.
 .
 webauth (4.2.2-1) experimental; urgency=low
 .
   * New upstream release.
     - Fix WebKDC::WebRequest error in proxy cookie handling that broke
       WebLogin functionality.
     - Fix Kerberos context cleanup after saving delegated credentials.
 .
 webauth (4.2.1-1) experimental; urgency=low
 .
   * New upstream release.
     - Fix keyring decoding from files on 64-bit systems.
     - Fix uninitialized memory error in token-encode test case.
 .
 webauth (4.2.0-1) experimental; urgency=low
 .
   * New upstream release.
     - Add support for Apache 2.4.  (Closes: #666861)
     - Support for AuthType StanfordAuth has been deprecated, and the
       corresponding mod_webauthldap support is not available when built
       against Apache 2.4.
     - Support use of Kerberos keyring caches for passing delegated
       credentials from mod_webauth to CGI and embedded code.
     - Fix merging of mod_webkdc Apache directives in corner cases.
     - Hopefully fix some problems with orphaned WebLogin login.fcgi and
       pwchange.fcgi scripts when running under FastCGI.
     - Significant revisions of the WebAuth Perl module API.
     - Allow id tokens of type krb5 to omit the subject attribute.
     - Convert the key and keyring functions in the WebAuth library API
       to use APR.  The signatures of these functions have therefore
       changed, and keyring manipulation has changed considerably.  Some
       of the APIs have been simplified or renamed.
     - The webauth_random_bytes, webauth_random_key, webauth_token_create,
       and webauth_token_parse APIs have been removed
     - All Perl modules now have POD documentation.
   * Convert to Apache 2.4 and follow the Apache module policy.
     - Rename libapache2-webauth to libapache2-mod-webauth and
       libapache2-webkdc to libapache2-mod-webkdc.  Add transitional
       packages to ease the upgrade.
     - Use dh_apache2 to handle module and configuration installation.  Do
       not use it for maintainer script actions, since
       libapache2-mod-webauth modules have required configuration and can't
       be enabled by default.
     - Update the maintainer script actions for the new Apache module
       policy.
     - Depend on apache2-dev instead of apache2-threaded-dev.
     - Remove explicit dependencies on apache2.2-common.
     - Use apxs, not apxs2.
   * Mark libwebauth7 and libwebauth-dev Multi-Arch: same and webauth-utils
     Multi-Arch: foreign.  Convert to multiarch library paths.
   * libwebauth-dev now suggests libapr1-dev since it is required to use
     the parts of the API that require APR (such as keyring traversal or
     creating the WebAuth context from an existing APR pool).
   * Switch to xz compression for the upstream and Debian tarballs and for
     the data element of the generated binary packages.
   * Enable parallel builds.
   * Use dh-autoreconf to always regenerate the build system from source.
     Link with --as-needed to ensure we don't pick up unnecessary shared
     library dependencies.
   * Move single-debian-patch to local-options and patch-header to
     local-patch-header so that they only apply to the packages I build and
     NMUs get regular version-numbered patches.
   * Purging libapache2-mod-{webauth,webkdc} no longer unconditionally
     removes the contents of /var/lib/{webauth,webkdc}.  Instead, known
     files are removed and then removal of the directory is attempted,
     ignoring failure if the directory is non-empty.
   * Update to debhelper compatibility level V9.
     - Use dpkg-buildflags to set CFLAGS.
     - Enable bindnow hardening.  Leave PIE off for right now.
     - Simplify all *.install rules to remove debian/tmp and not specify
       the destination if it echoes the source.
   * Convert debian/copyright to copyright-format 1.0.
Checksums-Sha1:
 9189f94614d85dc68795297cb705b315643146eb 2329 webauth_4.5.4-1~bpo60+1.dsc
 e1c193eca5cce4d4b1269a30dc7a1b382e177143 28356 webauth_4.5.4-1~bpo60+1.debian.tar.xz
 50abb63f2ccbccea11357b6930dcc9505d5808df 233514 libapache2-webauth_4.5.4-1~bpo60+1_i386.deb
 8405ec2f04403dfdc95a3e6a5fb2b448c65efefa 110214 libapache2-webkdc_4.5.4-1~bpo60+1_i386.deb
 9a6fcfb34346ccd9360513f3b71ed9fffdf5dab2 148878 libwebauth-perl_4.5.4-1~bpo60+1_i386.deb
 e1aab4856563798e2f1ad21bf729b4ff9670d587 83298 libwebauth10_4.5.4-1~bpo60+1_i386.deb
 2b5614b1bfa53c925f2940a8cf04d5e1eebe9498 98552 libwebauth-dev_4.5.4-1~bpo60+1_i386.deb
 3fcc6025d98f2858f13959654d73606d369a8bed 119676 libwebkdc-perl_4.5.4-1~bpo60+1_all.deb
 aa65d36d832352219d4ca3c8b9bca06364992709 62116 webauth-tests_4.5.4-1~bpo60+1_all.deb
 80def4410f23706418cc6039e4579c67da8a661c 59734 webauth-utils_4.5.4-1~bpo60+1_i386.deb
 49855ef00304e2cf52ec5df28e181fb08305875e 120494 webauth-weblogin_4.5.4-1~bpo60+1_all.deb
 13e63601db068ef00b84c4f7dce530a88cbece90 235726 libapache2-webauth_4.5.4-1~bpo60+1_amd64.deb
 5b93c8e9ab3ce6b2dbb374e9ab128ca6068c6991 111006 libapache2-webkdc_4.5.4-1~bpo60+1_amd64.deb
 a6c074d4fc606e164160b002238f032874b62fa8 149204 libwebauth-perl_4.5.4-1~bpo60+1_amd64.deb
 1ca6c92c04edd21078bc5c528e54f1afb61bf1c5 85438 libwebauth10_4.5.4-1~bpo60+1_amd64.deb
 dbb62b8711a5a00e3510de08d4166108ae59e254 102784 libwebauth-dev_4.5.4-1~bpo60+1_amd64.deb
 b34305a9600be98e10fb19afb40e3e7b3a5fad32 61042 webauth-utils_4.5.4-1~bpo60+1_amd64.deb
Checksums-Sha256:
 b5407bf5a76deb476002d6a28ac0735ecc617c94305c36e0f3e20d7ec9aadc24 2329 webauth_4.5.4-1~bpo60+1.dsc
 e3d06434542e3f2351a414b6b85574df41e6445d83eac57cd2024c7f0f08aa82 28356 webauth_4.5.4-1~bpo60+1.debian.tar.xz
 cbeb494814fa2ac69e190e38aa08ddeefaf1e3bb9c4fff413e7b547fb6388956 233514 libapache2-webauth_4.5.4-1~bpo60+1_i386.deb
 f847e5e70c07f0763760e38f98c8d92ddf9808a4c90084a0e433f0c8f0a615ce 110214 libapache2-webkdc_4.5.4-1~bpo60+1_i386.deb
 2017c4bf8392a262e559f03777a4f03a03d77f002edc757a8bd2819cb1f72dcb 148878 libwebauth-perl_4.5.4-1~bpo60+1_i386.deb
 aa039000209016f7bb053e3b9ce0f4b2979e6b88ff8866cdbb9441754f15c5c1 83298 libwebauth10_4.5.4-1~bpo60+1_i386.deb
 f2f82e509eaca2eaa415410a323def26feb6362036308a63e6bc1258089fed6b 98552 libwebauth-dev_4.5.4-1~bpo60+1_i386.deb
 8cbb7997c8637ab66aa08afaf0f7e4dc82f1e74f385ab15a71340e3062797f20 119676 libwebkdc-perl_4.5.4-1~bpo60+1_all.deb
 6a4f825a65a15341edef70a6e1e8e7afb69630448d5471b2551919656b29b9de 62116 webauth-tests_4.5.4-1~bpo60+1_all.deb
 7b32a69fa983d94067c70fb03196dcd8e1f7031e641d3fec6c25d5748f4b3d84 59734 webauth-utils_4.5.4-1~bpo60+1_i386.deb
 8c9d492f4e41a72dfacd728b8f2101a5c9e83931e3ccf9aae9a31eec7fb63377 120494 webauth-weblogin_4.5.4-1~bpo60+1_all.deb
 33fdbc60cdc926250606e288e4d61bbc7f8236d524d14a65313b1f7f43b82c4c 235726 libapache2-webauth_4.5.4-1~bpo60+1_amd64.deb
 b83fdb16344cedd8d5367a6bcf49daf4b75da1200294b44edc5d3e8280e8c7ae 111006 libapache2-webkdc_4.5.4-1~bpo60+1_amd64.deb
 33389f585caa691039ed0d5938732b4d26e292b7a23e8f7862e6bd0abb0aa6b1 149204 libwebauth-perl_4.5.4-1~bpo60+1_amd64.deb
 bdf566f7c0f5f45a76393076c62aa0781941470be3ee2795051b4e92cd3872a4 85438 libwebauth10_4.5.4-1~bpo60+1_amd64.deb
 a4bcdcf37fcfd2a6a52fe4ad0ade1c17b0a2a1df22f262c1891cb71a98a47b03 102784 libwebauth-dev_4.5.4-1~bpo60+1_amd64.deb
 713a3303028a08e384c89b5823ae7c07e07e5fc3b400926f48ca53e5ee9f4c38 61042 webauth-utils_4.5.4-1~bpo60+1_amd64.deb
Files:
 4c2907ea967a1541a04f23c0c2a247a1 2329 web optional webauth_4.5.4-1~bpo60+1.dsc
 7df9ea4bb5ad808ff4563e3839b96a0f 28356 web optional webauth_4.5.4-1~bpo60+1.debian.tar.xz
 fd98de1720f2b62356403498fb1a8d7b 233514 httpd optional libapache2-webauth_4.5.4-1~bpo60+1_i386.deb
 f32bc8a00f1b2864ddba1f3b7163a87a 110214 httpd optional libapache2-webkdc_4.5.4-1~bpo60+1_i386.deb
 99978588fa369da689d4b7f9ce4babcf 148878 perl optional libwebauth-perl_4.5.4-1~bpo60+1_i386.deb
 ba6d15719f6ef99546ba093694cf8fba 83298 libs optional libwebauth10_4.5.4-1~bpo60+1_i386.deb
 5a69a0e0404dba2738b90301d90760fe 98552 libdevel extra libwebauth-dev_4.5.4-1~bpo60+1_i386.deb
 df14a7f73d94a533432787cc497c75c8 119676 perl optional libwebkdc-perl_4.5.4-1~bpo60+1_all.deb
 b9ccb6f0af843b8b01d13dcb2b98a8a5 62116 web optional webauth-tests_4.5.4-1~bpo60+1_all.deb
 79a37f4b21bd5aa6df6920aff61e5548 59734 web optional webauth-utils_4.5.4-1~bpo60+1_i386.deb
 4c6f9f377a696d25a1810995c0bb3999 120494 web optional webauth-weblogin_4.5.4-1~bpo60+1_all.deb
 5455f9d2634b1bd988a611219870fce1 235726 httpd optional libapache2-webauth_4.5.4-1~bpo60+1_amd64.deb
 8e2d594e188452a8d6ada02985ca9dd8 111006 httpd optional libapache2-webkdc_4.5.4-1~bpo60+1_amd64.deb
 c3c19f1796919e31eda0d41844f1f990 149204 perl optional libwebauth-perl_4.5.4-1~bpo60+1_amd64.deb
 7c4cfcf574b3054eec2bfabba9908050 85438 libs optional libwebauth10_4.5.4-1~bpo60+1_amd64.deb
 d07e3974929e7bb66f2d6d7bd97d6931 102784 libdevel extra libwebauth-dev_4.5.4-1~bpo60+1_amd64.deb
 3ece71e6817acd77e0d9bc9caa65bafb 61042 web optional webauth-utils_4.5.4-1~bpo60+1_amd64.deb

Unverified

debian/4.5.4-1_bpo70+1

a0468037 · Fix a syntax error in debian/control · Aug 18, 2013

Debian release 4.5.4-1~bpo70+1

Format: 1.8
Date: Sun, 18 Aug 2013 18:19:24 PDT
Source: webauth
Binary: libapache2-mod-webauth libapache2-mod-webauthldap libapache2-mod-webkdc libapache2-webauth libapache2-webkdc libwebauth-perl libwebauth10 libwebauth-dev libwebkdc-perl webauth-tests webauth-utils webauth-weblogin
Architecture: all amd64 i386 source
Version: 4.5.4-1~bpo70+1
Distribution: wheezy-backports
Urgency: low
Maintainer: Russ Allbery <rra@debian.org>
Changed-By: Russ Allbery <rra@debian.org>
Description:
 libapache2-mod-webauth - Apache module for WebAuth authentication
 libapache2-mod-webauthldap - Apache module for WebAuth LDAP lookup and authorization
 libapache2-mod-webkdc - Apache modules for a WebAuth authentication KDC
 libapache2-webauth - Transitional package for WebAuth Apache modules
 libapache2-webkdc - Transitional package for WebAuth authentication KDC
 libwebauth-dev - Development files for WebAuth authentication
 libwebauth-perl - Perl library for WebAuth authentication
 libwebauth10 - Shared libraries for WebAuth authentication
 libwebkdc-perl - Perl libraries for WebAuth central login server
 webauth-tests - Tests for the WebAuth authentication modules
 webauth-utils - Command-line utilities for WebAuth authentication
 webauth-weblogin - Central login server for WebAuth authentication
Closes: 666861 691878 705557 713452 714602
Changes:
 webauth (4.5.4-1~bpo70+1) wheezy-backports; urgency=low
 .
   * Backport to stable.
   * Revert the migration to Apache 2.4 and restore Apache 2.2 handling of
     module installation and enabling, but keep the new package names.
 .
 webauth (4.5.4-1) unstable; urgency=low
 .
   * New upstream release.
     - Warn about mismatched webkdc-proxy tokens but no longer treat them
       as a fatal error.
     - Fix handling of non-password session factor requirements.
     - Improve handling of initial factor requirements when users have a
       way to establish initial credentials that don't include a password
       factor.
     - Improve handling of a Kerberos webkdc-proxy token requirement during
       a multifactor authentication.
     - Retry WebLogin posts to the WebKDC once to be more robust against
       interruptions by signals (such as from the FastCGI process manager).
     - Produce more succinct and hopefully better error messages when
       WebLogin cannot post to the WebKDC.
     - Ignore SIGPIPE signals in WebLogin scripts.
     - Require the return URL be absolute and not contain non-ASCII
       characters in mod_webkdc processing.
     - Fix WebLogin replay detection logic to not trigger on password
       changes.
     - Work around problems in WebLogin caused by the WebKDC returning
       error messages that contain undeclared non-UTF-8 characters in
       violation of the XML standard.
     - Improve error reporting of unparsable XML received by the WebLogin
       server from the WebKDC.
     - Fix logging of mod_webkdc <requestTokenRequest> failures.
     - Fix the prototype attributes for webauth_user_validate.
     - Log when mod_webkdc ignores expired tokens.
     - Display more correct errors after some failures during the second
       step of a multifactor authentication.
     - Correctly diagnose a missing service token in a WebLogin request and
       report the correct error instead of an internal error.
     - Make the version of all Perl modules match the WebAuth release.
 .
 webauth (4.5.3-5) unstable; urgency=low
 .
   * Only remove /var/lib/webauth during purge if the directory exists.
     Both libapache2-mod-webauth and libapache2-mod-webauthldap create and
     use that directory, so it may have already been removed by the other
     package.  (Closes: #714602)
 .
 webauth (4.5.3-4) unstable; urgency=low
 .
   * Apply upstream patch to fix incorrect linkage of some of the test
     programs.  (Closes: #713452)
 .
 webauth (4.5.3-3) unstable; urgency=low
 .
   * Move mod_webauthldap into a separate libapache2-mod-webauthldap
     package.  This permits better dependencies, more closely conforms to
     the Apache module naming convention, and allows users who aren't
     interested in the LDAP module to easily remove it.  Note that the
     libapache2-mod-webauth package does not attempt to clean up
     configuration files left behind from the mod_webauthldap module, since
     nearly all users upgrading from an older version will end up with both
     packages installed, and removal of libapache2-mod-webauthldap will do
     the right thing.  Additional cleanup would only be needed for people
     upgrading from experimental versions of libapache2-mod-webauth who do
     not install libapache2-mod-webauthldap and doesn't seem worth the
     complexity.
   * Add proper Breaks/Replaces for the Apache module package renaming.
   * Pass LDFLAGS from the main build to the Perl module build so that the
     hardening flags are set properly.
 .
 webauth (4.5.3-2) unstable; urgency=low
 .
   * Upload to unstable.
   * Now that dh_apache2 has an option to not enable the modules by
     default, let it handle all module setup for libapache2-mod-webauth
     except for the Apache restart and remove the now-unnecessary prerm
     script.
   * Simplify libcgi-application-perl Depends and Build-Depends by dropping
     the alternatives that were required for squeeze.
   * Add build dependency on dh-apache2 per the dh_apache2 manual page.
 .
 webauth (4.5.3-1) experimental; urgency=low
 .
   * New upstream release.
     - SECURITY: Clear header state between requests to avoid information
       leaks or infinite redirects for WebLogin servers using FastCGI and
       $REMUSER_REDIRECT (not the default).  The vulnerability was
       introduced in WebAuth 4.4.1.  All versions of WebAuth with this
       vulnerability were only uploaded to Debian experimental.
       (CVE-2013-2106)
 .
 webauth (4.5.2-1) experimental; urgency=low
 .
   * New upstream release.
     - WebLogin now supports preserving remember_login on authentication
       failure.  Template changes are required.
     - Fix clearing of failed authentication attempts on successful auth.
     - Fix setting cookies on the WebLogin error page.
     - Stop clearing single sign-on cookies on cookie test redirect.
   * Recommend the GSS-API SASL module packages for mod_webauthldap and
     document their need in README.Debian.
   * Update the Debian-specific installation instructions to reference
     conf-available and a2enconf instead of /etc/apache2/conf.d.
 .
 webauth (4.5.1-1) experimental; urgency=low
 .
   * New upstream release.
     - Fix support for single sign-on in WebLogin, broken in 4.5.0.
     - Document additional template changes required for remember_login.
     - Preserve remember_login through a forced password change.
     - Pass any user information service message to the confirm template.
     - Avoid re-creating WebAuth cookies unnecessarily in WebLogin.
     - Fix a few bugs in the installable mod_webauth test suite.
   * Increase Breaks and minimum dependency versions between the WebLogin
     components to 4.5.0.
   * Remove a stray Debian revision in the libwebauth10 symbols file.
 .
 webauth (4.5.0-1) experimental; urgency=low
 .
   * New upstream release.
     - WebLogin now supports indicating, on the login form template,
       whether to create single sign-on cookies.  The default form sends a
       parameter saying to do so, but the default behavior is to not create
       the cookies.  This will require a template change for most WebLogin
       deployments.
     - Revert change in WebAuthForceLogin interpretation introduced in
       WebAuth 4.4.0.  It once again requires authentication with a login
       token.  Document that it will not work well with authorization
       identities set after authentication.
     - Fix password change handling in WebLogin, broken since 4.4.0.
     - Fix reporting of password rejection reasons, broken since 4.3.0.
     - mod_webauth and mod_webkdc now produce much better error logs.
     - Initial multifactor no longer satisfies a requirement for random
       session multifactor, correcting a long-standing bug.
     - New WebAuthLdapOperationalAttribute directive for mod_webauthldap
       that allows inclusion of operational attributes in the environment.
     - WebLogin no longer supports obtaining the password expiration from a
       kadmin-remctl backend via a direct remctl call.  Instead, it uses
       the value from the WebKDC, which comes from the user information
       service.
     - The WebLogin confirmation page supports a new expire_timestamp
       variable, which contains the password expiration in seconds since
       UNIX epoch.  This should be used instead of the (deprecated)
       expire_date variable since it isn't preformatted and can therefore
       be localized.  See the sample confirm.tmpl template for how to
       format the date for display.
     - New support for persistent cookies containing additional factors,
       controlled by the user information service.
     - The WebKDC now passes the user's current factors to the user
       information service as an additional parameter to the userinfo
       call, which can be used to change behavior based on whether the user
       has persistent factors set.
     - The user information service can now return a specific set of
       required factors instead of just indicating multifactor is required.
     - The user information service can return a message for display in
       the multifactor authentication page in WebLogin (and that has been
       added to the default templates).
     - The user information service can, in both the userinfo and validate
       calls, return an opaque data structure to WebLogin, and WebLogin can
       send an opaque data structre back in the validate call.  This allows
       for multistep multifactor interactions outside of WebAuth's
       knowledge, such as resynchronization of hardware tokens.
     - The user information service can add factors to a user's successful
       interactive authentication.
     - WebLogin and the multifactor page template now receive a list of the
       factors a user needs but doesn't yet have, instead of just a
       complete list of the desired factors.
     - WebLogin can now tell the WebKDC and, in turn, the user information
       service what type of OTP authentication was used, if it knows.
     - The user information service can indicate the expiration time of
       factors resulting from an OTP authentication.
     - Errors in contacting the user information service are now logged
       even if the WebKDC is configured to ignore those errors.
     - Multiple changes to the libwebauth API, most notably revisions to
       the webkdc_login and userinfo APIs and a new opaque factors data
       type.
     - mod_webkdc no longer supports obtaining proxy tokens via a
       <getTokenRequest> call.  This was never used and is conceptually
       useless.
     - undef arguments to Perl XS functions are now properly diagnosed.
   * Fix some incorrect URLs in the webauth-tests package that were left
     over from the test suite rewrite.
   * Use an uppercase realm name in the token.acl example in README.Debian
     for libapache2-mod-webkdc.  Nearly all Kerberos realms will be
     uppercase and the realm is case-sensitive.  Thanks to Lisandro Damián
     Nicanor Pérez Meyer for the report.  (Closes: #705557)
 .
 webauth (4.4.3-1) experimental; urgency=low
 .
   * New upstream release.
     - Fix WebAuthTrustAuthzIdentity to not enable WebAuthDoLogout.
     - Correctly handle an authorization identity equal to the
       authentication identity rather than rejecting it with an error.
     - Remove an arbitrary mod_webauthldap limit in the number of values
       of a multivalued attribute will be exposed in the environment.
     - Fix a syntax error in replay handling in the default WebLogin
       template.
     - Ignore empty app cookies in mod_webauth instead of logging an
       error.  These are created internally by mod_webauth when the app
       cookie has expired.
     - Better mod_webauth logging when the user's app cookie has expired.
     - Stop logging the binary app token in mod_webauth.
     - Fix some obscure error handling cases caught by clang --analyze.
   * Use the new -q flag to a2query when probing for whether mod_webauth
     or mod_webauthldap are enabled, and depend on the appropriate version
     of apache2.
   * Let dh_apache2 handle configuration of libapache2-mod-webkdc now that
     we can tell it to skip libapache2-mod-webauth, and build-depend on the
     appropriate version of apache2-dev.
 .
 webauth (4.4.2-1) experimental; urgency=low
 .
   * New upstream release.
     - Fix an occasional WebKDC crash when determining if an authentication
       is interactive.  Should fix FTBFS on powerpc.
     - Add additional Autoconf checks to hopefully build on Hurd.
 .
 webauth (4.4.1-1) experimental; urgency=low
 .
   * New upstream release.
     - New authenticate callback supported in WebLogin configuration.
     - WebLogin should now run more efficiently under FastCGI.
 .
 webauth (4.4.0-1) experimental; urgency=low
 .
   * New upstream release.
     - New authorization identity support in all components of WebAuth.
     - New WebKdcLoginTimeLimit directive for mod_webkdc to control the
       time limit for multistage login and when a recent login no longer
       counts towards session factors.
     - WebAuthForceLogin no longer forces re-authentication if the last
       authentication was within WebKdcLoginTimeLimit.
     - WebLogin now optionally supports replay detection and rate limiting
       of failed login attempts.  This support requires a memcached server
       to store the relevant data.
     - The WebLogin error template now takes two new parameters for errors
       related to replays and rate limiting.
     - Set single sign-on cookies in WebLogin if appropriate even when
       displaying an error.  This fixes looping issues with site
       restrictions done via the user innformation service.
     - The WebLogin configuration options @REMUSER_LOCAL_REALMS and
       @REMUSER_PERMITTED_REALMS replace @REMUSER_REALMS.  The latter is
       supported for backward compatibility.
     - Multiple fixes for encoding of Kerberos credentials.
     - Fix mapping of WebKDC error codes to names in WebLogin.
     - Document the WebAuthRequireSSL directive.
     - webauth_token_{encrypt,decrypt} are now part of the public API.
     - webauth_base64_*, webauth_hex_*, webauth_attr_*, and webauth_attrs_*
       functions are no longer part of the public API.
     - The webauth.h header has been removed.  Use the more specific
       webauth/*.h headers.
     - New public webauth_keyring_encode and webauth_keyring_decode
       functions and corresponding Perl API to handle keyring serialization
       without requiring that it be done to a file.
     - The WA_TK_*, WA_TT_*, and WA_SA_* preprocessor constants are no
       longer provided.  They weren't useful.
     - The WA_ERR_KEYRING_* error codes have changed to WA_ERR_FILE_* and
       new error code WA_ERR_FILE_NOT_FOUND has been added.
   * Update standards version to 3.9.4.
     - Update Vcs-Git to specify the Debian packaging branch.
 .
 webauth (4.3.3-1) experimental; urgency=low
 .
   * New upstream release.
     - Fix memory initialization error in the WebKDC that could cause
       incorrect handling of random multifactor verification.
     - Fix memory allocation error in the WebAuth Perl module that could
       cause memory corruption in the WebLogin server.
   * Add Breaks of libwebkdc-perl and webauth-weblogin << 4.3.0 to
     libwebauth-perl and of webauth-weblogin << 4.3.0 to libwebkdc-perl.
     The API of the Perl modules changed in 4.3.0.  (Closes: #691878)
   * Remove ~ on 4.3.0 dependencies.  There were no pre-release versions,
     so this is just visual clutter.
   * Drop Replaces and Breaks on libwebauth1-dev, not required since the
     squeeze release.
 .
 webauth (4.3.2-1) experimental; urgency=low
 .
   * New upstream release.
     - Fix memory pool allocation error in mod_webauth that could prevent
       it from obtaining a service token from the WebKDC.
 .
 webauth (4.3.1-1) experimental; urgency=low
 .
   * New upstream release.
     - WebAuthDoLogout is now allowed in .htaccess via AuthConfig.
     - Fix an invalid free in webauth_webkdc_login.
     - Fix incorrect Perl module includes in pwchange.fcgi.
     - Add an overloaded cmp operator for WebAuth::Exception.
   * Tighten the dependencies between the Perl modules and WebLogin.
 .
 webauth (4.3.0-1) experimental; urgency=low
 .
   * New upstream release.
     - mod_webauth now sets HttpOnly on cookies by default.  There is a new
       WebAuthHttpOnly flag to disable this behavior.
     - WebLogin now sets HttpOnly on all cookies.
     - Add new optional <userMessage> element to <requestTokenResponse>
       from the WebKDC and a new error code to indicate that this HTML
       error should be displayed to the user.
     - Support an <error> return element from the user information
       service and pass it as the <userMessage> element.
     - Add WebLogin support via an err_html parameter to display the error
       returned in the <userMessage> element from the WebKDC.
     - Change all Kerberos functions in the WebAuth library API to take the
       WebAuth context and use APR.  Remove some unused functions, merge
       others, and rename others.  Update the Perl API to match.  Any Perl
       programs that call WebAuth Kerberos functions will require updates.
     - Fix decoding of Kerberos credentials with a second ticket.
     - Kerberos realms are no longer escaped before matching them against
       the Apache configuration.  This only affects handling of realm names
       with unusual characters.
   * Mark webauth-tests and webauth-weblogin as Multi-Arch: foreign.  This
     is necessary even for arch: all packages.
 .
 webauth (4.2.2-1) experimental; urgency=low
 .
   * New upstream release.
     - Fix WebKDC::WebRequest error in proxy cookie handling that broke
       WebLogin functionality.
     - Fix Kerberos context cleanup after saving delegated credentials.
 .
 webauth (4.2.1-1) experimental; urgency=low
 .
   * New upstream release.
     - Fix keyring decoding from files on 64-bit systems.
     - Fix uninitialized memory error in token-encode test case.
 .
 webauth (4.2.0-1) experimental; urgency=low
 .
   * New upstream release.
     - Add support for Apache 2.4.  (Closes: #666861)
     - Support for AuthType StanfordAuth has been deprecated, and the
       corresponding mod_webauthldap support is not available when built
       against Apache 2.4.
     - Support use of Kerberos keyring caches for passing delegated
       credentials from mod_webauth to CGI and embedded code.
     - Fix merging of mod_webkdc Apache directives in corner cases.
     - Hopefully fix some problems with orphaned WebLogin login.fcgi and
       pwchange.fcgi scripts when running under FastCGI.
     - Significant revisions of the WebAuth Perl module API.
     - Allow id tokens of type krb5 to omit the subject attribute.
     - Convert the key and keyring functions in the WebAuth library API
       to use APR.  The signatures of these functions have therefore
       changed, and keyring manipulation has changed considerably.  Some
       of the APIs have been simplified or renamed.
     - The webauth_random_bytes, webauth_random_key, webauth_token_create,
       and webauth_token_parse APIs have been removed
     - All Perl modules now have POD documentation.
   * Convert to Apache 2.4 and follow the Apache module policy.
     - Rename libapache2-webauth to libapache2-mod-webauth and
       libapache2-webkdc to libapache2-mod-webkdc.  Add transitional
       packages to ease the upgrade.
     - Use dh_apache2 to handle module and configuration installation.  Do
       not use it for maintainer script actions, since
       libapache2-mod-webauth modules have required configuration and can't
       be enabled by default.
     - Update the maintainer script actions for the new Apache module
       policy.
     - Depend on apache2-dev instead of apache2-threaded-dev.
     - Remove explicit dependencies on apache2.2-common.
     - Use apxs, not apxs2.
   * Mark libwebauth7 and libwebauth-dev Multi-Arch: same and webauth-utils
     Multi-Arch: foreign.  Convert to multiarch library paths.
   * libwebauth-dev now suggests libapr1-dev since it is required to use
     the parts of the API that require APR (such as keyring traversal or
     creating the WebAuth context from an existing APR pool).
   * Switch to xz compression for the upstream and Debian tarballs and for
     the data element of the generated binary packages.
   * Enable parallel builds.
   * Use dh-autoreconf to always regenerate the build system from source.
     Link with --as-needed to ensure we don't pick up unnecessary shared
     library dependencies.
   * Move single-debian-patch to local-options and patch-header to
     local-patch-header so that they only apply to the packages I build and
     NMUs get regular version-numbered patches.
   * Purging libapache2-mod-{webauth,webkdc} no longer unconditionally
     removes the contents of /var/lib/{webauth,webkdc}.  Instead, known
     files are removed and then removal of the directory is attempted,
     ignoring failure if the directory is non-empty.
   * Update to debhelper compatibility level V9.
     - Use dpkg-buildflags to set CFLAGS.
     - Enable bindnow hardening.  Leave PIE off for right now.
     - Simplify all *.install rules to remove debian/tmp and not specify
       the destination if it echoes the source.
   * Convert debian/copyright to copyright-format 1.0.
Checksums-Sha256:
 64ad06ea8701fa151539cb2809d78be9f51799ea8c0a5c111ad8ef7474419f7f 2646 webauth_4.5.4-1~bpo70+1.dsc
 4994b99708f934d60e946a4514f0f7a21b62eb801012ac2493e4dde912733170 27672 webauth_4.5.4-1~bpo70+1.debian.tar.xz
 3a34ff8647bd4f8e48d405b792a5be10ead7cb010d7ddef7d919319877e3193e 224640 libapache2-mod-webauth_4.5.4-1~bpo70+1_i386.deb
 c3822752fd2dad1d6f15e762d3a26b47b1051119e9819b12b1820bfba7613a00 90920 libapache2-mod-webauthldap_4.5.4-1~bpo70+1_i386.deb
 8e363814df0e32d1bbb5be683df34ac98028c4286927d9920951d213981a7115 110524 libapache2-mod-webkdc_4.5.4-1~bpo70+1_i386.deb
 2309b4d49e25258ea3d598948acc96117c1eeee82917f2521b5e4abd531ac6c5 51942 libapache2-webauth_4.5.4-1~bpo70+1_all.deb
 8f1ddc26c535267a126b5dfb4c780e803c249054e82b79ad48c3dfdce4cfe2cf 51190 libapache2-webkdc_4.5.4-1~bpo70+1_all.deb
 4a786f3d1ae439f27612484f4053f21bbd460a37189fb0b0fbcc1866b578e805 145636 libwebauth-perl_4.5.4-1~bpo70+1_i386.deb
 86674b4d91d739c351aa36ab4504d3651c972f5921f5f9d8cc9921ab2995111e 86146 libwebauth10_4.5.4-1~bpo70+1_i386.deb
 47544dfd94ef4a8e8456dfbf881b5f51c93647d740c92d5db87bcaaa98a376db 101144 libwebauth-dev_4.5.4-1~bpo70+1_i386.deb
 bd4147f41a7033aeb79a02fb1c533f091ae28058ca1fd3c337ccb68285fa9338 119558 libwebkdc-perl_4.5.4-1~bpo70+1_all.deb
 93a3dcad85a2942ad831f47cc06f083994b5a7bb16d22bcafee1f6660831dacb 62030 webauth-tests_4.5.4-1~bpo70+1_all.deb
 54ef30b7684855733108be9a407efae85940f87bae0b0326f98109ffb9c5e80e 60338 webauth-utils_4.5.4-1~bpo70+1_i386.deb
 94b5e2218d99ec21f627adaa20e46cbcabdd5d517af215a3de05d55fecbb4cab 120408 webauth-weblogin_4.5.4-1~bpo70+1_all.deb
 fc1ed4e42dc98b00755719f99217e999b607ed32ced7bf04e3008b792a397305 225228 libapache2-mod-webauth_4.5.4-1~bpo70+1_amd64.deb
 1a28052f4e8fd38a9f8298c4be553c89844e9197a06e69d78a68bbbf2941d449 90818 libapache2-mod-webauthldap_4.5.4-1~bpo70+1_amd64.deb
 00f46e04d1a1aa20e93211e90d40ce636cf9a98fd717c56bbb318d3b6b05c02c 110434 libapache2-mod-webkdc_4.5.4-1~bpo70+1_amd64.deb
 02926bfa0c3236df9f27c87e574cf93487203cb3f79c67713f65e1a6f2f0a555 145620 libwebauth-perl_4.5.4-1~bpo70+1_amd64.deb
 a12578daa0c8143b4296afd17ba07fd23ee732e03c151c7309dd2df90e8bdde2 85630 libwebauth10_4.5.4-1~bpo70+1_amd64.deb
 7b59a302ed8e363a2b5477d99e4eba7d7c228a577209926599052403dca96b23 102704 libwebauth-dev_4.5.4-1~bpo70+1_amd64.deb
 2827a8633c5e09b7c836c96a29dc1d501d2dc7d6912f40ea7ff5282cbe4205aa 60930 webauth-utils_4.5.4-1~bpo70+1_amd64.deb
 9c393ffb63d86166cd80948ef4da250d0ce82174cafb460c0d5fa60d5e4391df 868296 webauth_4.5.4.orig.tar.xz
Checksums-Sha1:
 fb60d2c491b5ec6cb426abf59753c8ec0c9d02c3 2646 webauth_4.5.4-1~bpo70+1.dsc
 ca2edf8b7a6e73b5d36405dd8b58e5293a25a169 27672 webauth_4.5.4-1~bpo70+1.debian.tar.xz
 52f23c2ebe8f31b9bc12d4e22e7981c37a6b93f6 224640 libapache2-mod-webauth_4.5.4-1~bpo70+1_i386.deb
 b8e472ff3a7c0b84d03da0dae4fdbf43ebe48c6b 90920 libapache2-mod-webauthldap_4.5.4-1~bpo70+1_i386.deb
 67980d3a629199b08cf9ac171b895fde6f85a77c 110524 libapache2-mod-webkdc_4.5.4-1~bpo70+1_i386.deb
 0641a5a004b9dd92a9ff724c6f25a2cfbc6c73d2 51942 libapache2-webauth_4.5.4-1~bpo70+1_all.deb
 96614541ddd3c28c54106a9cbeae0c30cb2edbda 51190 libapache2-webkdc_4.5.4-1~bpo70+1_all.deb
 1442b9247cec3d73f0cdce6709708714eb65658c 145636 libwebauth-perl_4.5.4-1~bpo70+1_i386.deb
 ed306d6924d3fb4954f7e4f06c47ee42b03c12ed 86146 libwebauth10_4.5.4-1~bpo70+1_i386.deb
 f92d3a1836acbd259f26ced34d2cff4a88603a20 101144 libwebauth-dev_4.5.4-1~bpo70+1_i386.deb
 11091082bdcb10b35560fe7e2fef3ce32faa7b70 119558 libwebkdc-perl_4.5.4-1~bpo70+1_all.deb
 9dfcc0adf25b07abf023ccc462cdd3a200ec82fa 62030 webauth-tests_4.5.4-1~bpo70+1_all.deb
 7e5edac57623ed2616a851bd7d6e10c0a71a75f2 60338 webauth-utils_4.5.4-1~bpo70+1_i386.deb
 c5b7056dfafa3ae0dfc13de5555ccd4c31e08c59 120408 webauth-weblogin_4.5.4-1~bpo70+1_all.deb
 9dd234454b8c5c5d10aff58132ce883b0828360b 225228 libapache2-mod-webauth_4.5.4-1~bpo70+1_amd64.deb
 780052394597129412c2042d731937eff065aa7e 90818 libapache2-mod-webauthldap_4.5.4-1~bpo70+1_amd64.deb
 e16dd3fb05484a439274f25a9485317c4ea79fcb 110434 libapache2-mod-webkdc_4.5.4-1~bpo70+1_amd64.deb
 7a6ba28f6cbc37869de42b8000fa213b82f1b513 145620 libwebauth-perl_4.5.4-1~bpo70+1_amd64.deb
 dc64484ffaec047eb5392de9ebc119b725479284 85630 libwebauth10_4.5.4-1~bpo70+1_amd64.deb
 a1c8275140c1c5578c0ad25308ab7af8a0c455d2 102704 libwebauth-dev_4.5.4-1~bpo70+1_amd64.deb
 a50f8cbd211e0e8c896af8f74aec735ad14b5a13 60930 webauth-utils_4.5.4-1~bpo70+1_amd64.deb
 5009b31157600883662d8e0d989157ec9438aa28 868296 webauth_4.5.4.orig.tar.xz
Files:
 ed1b81fd26d296a355ecdf45fa0323de 2646 web optional webauth_4.5.4-1~bpo70+1.dsc
 1faf9de9e5e7636cce5f1558eaa31f07 27672 web optional webauth_4.5.4-1~bpo70+1.debian.tar.xz
 642859ebd185faedaed36e288af976d6 224640 httpd optional libapache2-mod-webauth_4.5.4-1~bpo70+1_i386.deb
 9f77c8d1944a367233153d724cf005d5 90920 httpd optional libapache2-mod-webauthldap_4.5.4-1~bpo70+1_i386.deb
 fda16a84a352e368de16c0c536535379 110524 httpd optional libapache2-mod-webkdc_4.5.4-1~bpo70+1_i386.deb
 ad428bb115a8985ef53b73d3fd0ace76 51942 oldlibs extra libapache2-webauth_4.5.4-1~bpo70+1_all.deb
 484844d4d0ba772a2bac37f6f0c5a9ca 51190 oldlibs extra libapache2-webkdc_4.5.4-1~bpo70+1_all.deb
 71aab44bb563ba4a3d21ae6054bfca2d 145636 perl optional libwebauth-perl_4.5.4-1~bpo70+1_i386.deb
 cf9aa4b93d55544cdf679f3126afa8b9 86146 libs optional libwebauth10_4.5.4-1~bpo70+1_i386.deb
 238db5dc303ba587d1708ae26a3e7df3 101144 libdevel extra libwebauth-dev_4.5.4-1~bpo70+1_i386.deb
 5f9117a99b83070a7d7dd928d13ceac3 119558 perl optional libwebkdc-perl_4.5.4-1~bpo70+1_all.deb
 8d84eed94b4a48235ee4077c8322ddbc 62030 web optional webauth-tests_4.5.4-1~bpo70+1_all.deb
 17cb4abd9b78d93c2ea9d70c4714dde4 60338 web optional webauth-utils_4.5.4-1~bpo70+1_i386.deb
 48135f957201692b354b2b23b13a30d9 120408 web optional webauth-weblogin_4.5.4-1~bpo70+1_all.deb
 8ec4fe4e26f8b09f61506fc3beb6a0c5 225228 httpd optional libapache2-mod-webauth_4.5.4-1~bpo70+1_amd64.deb
 a58749b730080d32b6b196ff3c62b5f9 90818 httpd optional libapache2-mod-webauthldap_4.5.4-1~bpo70+1_amd64.deb
 c89076b0a496426432d91672540c55c7 110434 httpd optional libapache2-mod-webkdc_4.5.4-1~bpo70+1_amd64.deb
 13ef9c43f393022bbb611c08f914139b 145620 perl optional libwebauth-perl_4.5.4-1~bpo70+1_amd64.deb
 a3ad17bd0b033f8b1568d45bebaa71bf 85630 libs optional libwebauth10_4.5.4-1~bpo70+1_amd64.deb
 aa0546a53e00636a50127f6ae111ff43 102704 libdevel extra libwebauth-dev_4.5.4-1~bpo70+1_amd64.deb
 2c670be8d6ee4af4ad4ea1c76c2e8fc4 60930 web optional webauth-utils_4.5.4-1~bpo70+1_amd64.deb
 4053be33fcaed57108893ed5c8ea0b1d 868296 web optional webauth_4.5.4.orig.tar.xz

Unverified

debian/4.5.4-1

44b09d87 · Finalize changes for 4.5.4-1 · Aug 16, 2013

Debian release 4.5.4-1

Format: 1.8
Date: Fri, 16 Aug 2013 15:15:12 -0700
Source: webauth
Binary: libapache2-mod-webauth libapache2-mod-webauthldap libapache2-mod-webkdc libapache2-webauth libapache2-webkdc libwebauth-perl libwebauth10 libwebauth-dev libwebkdc-perl webauth-tests webauth-utils webauth-weblogin
Architecture: source i386 all
Version: 4.5.4-1
Distribution: unstable
Urgency: low
Maintainer: Russ Allbery <rra@debian.org>
Changed-By: Russ Allbery <rra@debian.org>
Description:
 libapache2-mod-webauth - Apache module for WebAuth authentication
 libapache2-mod-webauthldap - Apache module for WebAuth LDAP lookup and authorization
 libapache2-mod-webkdc - Apache modules for a WebAuth authentication KDC
 libapache2-webauth - Transitional package for WebAuth Apache modules
 libapache2-webkdc - Transitional package for WebAuth authentication KDC
 libwebauth-dev - Development files for WebAuth authentication
 libwebauth-perl - Perl library for WebAuth authentication
 libwebauth10 - Shared libraries for WebAuth authentication
 libwebkdc-perl - Perl libraries for WebAuth central login server
 webauth-tests - Tests for the WebAuth authentication modules
 webauth-utils - Command-line utilities for WebAuth authentication
 webauth-weblogin - Central login server for WebAuth authentication
Changes:
 webauth (4.5.4-1) unstable; urgency=low
 .
   * New upstream release.
     - Warn about mismatched webkdc-proxy tokens but no longer treat them
       as a fatal error.
     - Fix handling of non-password session factor requirements.
     - Improve handling of initial factor requirements when users have a
       way to establish initial credentials that don't include a password
       factor.
     - Improve handling of a Kerberos webkdc-proxy token requirement during
       a multifactor authentication.
     - Retry WebLogin posts to the WebKDC once to be more robust against
       interruptions by signals (such as from the FastCGI process manager).
     - Produce more succinct and hopefully better error messages when
       WebLogin cannot post to the WebKDC.
     - Ignore SIGPIPE signals in WebLogin scripts.
     - Require the return URL be absolute and not contain non-ASCII
       characters in mod_webkdc processing.
     - Fix WebLogin replay detection logic to not trigger on password
       changes.
     - Work around problems in WebLogin caused by the WebKDC returning
       error messages that contain undeclared non-UTF-8 characters in
       violation of the XML standard.
     - Improve error reporting of unparsable XML received by the WebLogin
       server from the WebKDC.
     - Fix logging of mod_webkdc <requestTokenRequest> failures.
     - Fix the prototype attributes for webauth_user_validate.
     - Log when mod_webkdc ignores expired tokens.
     - Display more correct errors after some failures during the second
       step of a multifactor authentication.
     - Correctly diagnose a missing service token in a WebLogin request and
       report the correct error instead of an internal error.
     - Make the version of all Perl modules match the WebAuth release.
Checksums-Sha1:
 e603dd926b0d8e9492b3b2d0c9b16a0031782bfe 2082 webauth_4.5.4-1.dsc
 5009b31157600883662d8e0d989157ec9438aa28 868296 webauth_4.5.4.orig.tar.xz
 9036538109c1a8c6599418a2c5b2296fda965bd0 27632 webauth_4.5.4-1.debian.tar.xz
 288ae517eb2f71ce955dcab6dd8b57e7d9941046 224234 libapache2-mod-webauth_4.5.4-1_i386.deb
 3c995d69492cab7e6166cba82bd58c39d1c63543 90072 libapache2-mod-webauthldap_4.5.4-1_i386.deb
 4b175b3e7cae7486db7b7b03f760e29c075f08be 109686 libapache2-mod-webkdc_4.5.4-1_i386.deb
 73aca366e1549154311e6dced83d0382272b96dc 51842 libapache2-webauth_4.5.4-1_all.deb
 927db7eeba6e9da18293656d1a4d56052dd30553 51088 libapache2-webkdc_4.5.4-1_all.deb
 27188c18e602e3b5380d9a1cbe35f07c1ea9ddec 145068 libwebauth-perl_4.5.4-1_i386.deb
 05b9e998623afdf066cb2e4bde7628ca4910f339 84334 libwebauth10_4.5.4-1_i386.deb
 ce021bb55c3f3f537e97cad27dd253643287e869 100074 libwebauth-dev_4.5.4-1_i386.deb
 33ef1c799acc43e307b3f4a1b215c77ffcbd2eb8 119526 libwebkdc-perl_4.5.4-1_all.deb
 7202f06833f2d09bba374580389f288e75602120 61936 webauth-tests_4.5.4-1_all.deb
 a98ef481e12eb211c495e9f328e3a0f895db718a 60092 webauth-utils_4.5.4-1_i386.deb
 5fee2f4cb9e1fcf6274bf84158b7349ddef06bd9 120306 webauth-weblogin_4.5.4-1_all.deb
Checksums-Sha256:
 4ae08a5dad7d212aca0eb58d2e36fb174f13e4789998585b57b19d35145ac602 2082 webauth_4.5.4-1.dsc
 9c393ffb63d86166cd80948ef4da250d0ce82174cafb460c0d5fa60d5e4391df 868296 webauth_4.5.4.orig.tar.xz
 ecbf211d569c196e9cda3fa442dde702b190837861ca8ae142973eb99ff3f964 27632 webauth_4.5.4-1.debian.tar.xz
 cfb684df13b22cef0687f19b62023411224a0212c45194ae4a59b8c19370b186 224234 libapache2-mod-webauth_4.5.4-1_i386.deb
 91d55b522e035b0a1a56510b2bd255b1ffee23f65c17d0bbec5240929b858a17 90072 libapache2-mod-webauthldap_4.5.4-1_i386.deb
 509447a8fe270ba7c99d80327598a1671382ebdb3668f2917287ee29efd8d0f8 109686 libapache2-mod-webkdc_4.5.4-1_i386.deb
 66703e6be11d5aa7680184f84d9e40de66c0383518c0abbe6f06cd139147cdfb 51842 libapache2-webauth_4.5.4-1_all.deb
 c44793d8577d13491a75af56b56d7c164f8b73316a09a59e89f255d0fbd1028d 51088 libapache2-webkdc_4.5.4-1_all.deb
 ccf84e02d0794230237166a8422bd5321a096ced24dbec30255e0ba66799b706 145068 libwebauth-perl_4.5.4-1_i386.deb
 7745f28a3c13873a2296c62ee106b20f6587ad77771167dc7e9ad4e77002eb83 84334 libwebauth10_4.5.4-1_i386.deb
 0ced746e03d0e8d7579922af17f097f0c0d1adbb2b8d46daff648f4704a03a24 100074 libwebauth-dev_4.5.4-1_i386.deb
 86d544fb4ed0f4c7eaf43e52f98d441ce4f91b4dfccf5bd88351c1be59b98932 119526 libwebkdc-perl_4.5.4-1_all.deb
 038322b801c035c8050dd6aa0488ad3a7c83dbbc5c51c9cd91c84fb3daae3df2 61936 webauth-tests_4.5.4-1_all.deb
 0c12ee11ca83c8dc5b0aef144f92f59311905dcc4ec85a87f07388c7ce286d5c 60092 webauth-utils_4.5.4-1_i386.deb
 76cc7916cd276ee81b535809ee6c6f34931e69e2f74b82944d1d2259160741cc 120306 webauth-weblogin_4.5.4-1_all.deb
Files:
 7d4924018ba35d9520852259aa6885b2 2082 web optional webauth_4.5.4-1.dsc
 4053be33fcaed57108893ed5c8ea0b1d 868296 web optional webauth_4.5.4.orig.tar.xz
 dff303bb0d3649cae97403478f185ba3 27632 web optional webauth_4.5.4-1.debian.tar.xz
 a36d55d84884e5dad5cc122c893af141 224234 httpd optional libapache2-mod-webauth_4.5.4-1_i386.deb
 039c3fc4d7b91ecf5e77bf2d698e879d 90072 httpd optional libapache2-mod-webauthldap_4.5.4-1_i386.deb
 3c2fab27c04d2678af3bf6c02f25f4c5 109686 httpd optional libapache2-mod-webkdc_4.5.4-1_i386.deb
 aec1d3c1007816142c06cb90321de64f 51842 oldlibs extra libapache2-webauth_4.5.4-1_all.deb
 77aafd3f3ef9f712ba32fee6f4b5780c 51088 oldlibs extra libapache2-webkdc_4.5.4-1_all.deb
 a49ed7f61948a02df6bc11b1f4e4b193 145068 perl optional libwebauth-perl_4.5.4-1_i386.deb
 d44c5acf27937ee286fc434dba1818ea 84334 libs optional libwebauth10_4.5.4-1_i386.deb
 c33196c17d0e6b1effa463469c2a6710 100074 libdevel extra libwebauth-dev_4.5.4-1_i386.deb
 b47232a27b5b6b3c9de47847fd8f8618 119526 perl optional libwebkdc-perl_4.5.4-1_all.deb
 632046aef5dcfefdec2093b26f0be42e 61936 web optional webauth-tests_4.5.4-1_all.deb
 a32dd3dfb860c3f7d985e0d913835ef5 60092 web optional webauth-utils_4.5.4-1_i386.deb
 1fd4117036dd1ed2efffdbf7b20dc886 120306 web optional webauth-weblogin_4.5.4-1_all.deb

Unverified

upstream/4.5.4

1ae650e2 · Imported Upstream version 4.5.4 · Aug 16, 2013
```
Upstream version 4.5.4
```
release/4.5.4

90bf6091 · Avoid WebLogin warning from attack probes on pwchange page · Aug 16, 2013
```
WebAuth release 4.5.4
```
Unverified

debian/4.5.3-5

d62f4489 · Check existence of /var/lib/webauth before rmdir · Jul 01, 2013

Debian release 4.5.3-5

Format: 1.8
Date: Mon, 01 Jul 2013 15:21:48 -0700
Source: webauth
Binary: libapache2-mod-webauth libapache2-mod-webauthldap libapache2-mod-webkdc libapache2-webauth libapache2-webkdc libwebauth-perl libwebauth10 libwebauth-dev libwebkdc-perl webauth-tests webauth-utils webauth-weblogin
Architecture: source i386 all
Version: 4.5.3-5
Distribution: unstable
Urgency: low
Maintainer: Russ Allbery <rra@debian.org>
Changed-By: Russ Allbery <rra@debian.org>
Description:
 libapache2-mod-webauth - Apache module for WebAuth authentication
 libapache2-mod-webauthldap - Apache module for WebAuth LDAP lookup and authorization
 libapache2-mod-webkdc - Apache modules for a WebAuth authentication KDC
 libapache2-webauth - Transitional package for WebAuth Apache modules
 libapache2-webkdc - Transitional package for WebAuth authentication KDC
 libwebauth-dev - Development files for WebAuth authentication
 libwebauth-perl - Perl library for WebAuth authentication
 libwebauth10 - Shared libraries for WebAuth authentication
 libwebkdc-perl - Perl libraries for WebAuth central login server
 webauth-tests - Tests for the WebAuth authentication modules
 webauth-utils - Command-line utilities for WebAuth authentication
 webauth-weblogin - Central login server for WebAuth authentication
Closes: 714602
Changes:
 webauth (4.5.3-5) unstable; urgency=low
 .
   * Only remove /var/lib/webauth during purge if the directory exists.
     Both libapache2-mod-webauth and libapache2-mod-webauthldap create and
     use that directory, so it may have already been removed by the other
     package.  (Closes: #714602)
Checksums-Sha1:
 89096e09c6b95cc69838f007f378c76a77c7edc4 2082 webauth_4.5.3-5.dsc
 ba566a83a8a1d032955ab500c30650719d7f2d57 27928 webauth_4.5.3-5.debian.tar.xz
 ed4668381f6eb35ed9708064b2b49c8a2edcf1d3 221890 libapache2-mod-webauth_4.5.3-5_i386.deb
 45d80a1d9b6e4ed8f409155418e5908f3482dc2e 87760 libapache2-mod-webauthldap_4.5.3-5_i386.deb
 9c914ad43b8a9a5b07cdcdb17d6ca1cf7f1b0169 107412 libapache2-mod-webkdc_4.5.3-5_i386.deb
 0ba5224462a1b3539090d8d4395a6f4b1b02bb4c 49976 libapache2-webauth_4.5.3-5_all.deb
 450075c41e3546bbb4786531f1cd7ee18bb65be6 49208 libapache2-webkdc_4.5.3-5_all.deb
 7d7da1435668de0a8d6f3f2f1514bea1366e44aa 143416 libwebauth-perl_4.5.3-5_i386.deb
 c440bf1fb32f27a5313fa69731c72c922edd0621 82056 libwebauth10_4.5.3-5_i386.deb
 a51cf0b8ab075ace80d9a025297da51efe2f2396 97856 libwebauth-dev_4.5.3-5_i386.deb
 5f36f789a29101b62b5aaee1989db3060d6d4b85 116926 libwebkdc-perl_4.5.3-5_all.deb
 700a7362898f3b33dffb98da03776d1204a528ee 60068 webauth-tests_4.5.3-5_all.deb
 011533c3f71abdcaedb52b9caf015f69af7f726e 58238 webauth-utils_4.5.3-5_i386.deb
 b8e7e2eabcfad15a22daf495467231a108b46eba 117964 webauth-weblogin_4.5.3-5_all.deb
Checksums-Sha256:
 8b568dca2f9e1eef28321f3407d09ece7277bb6d7dddd47976adb147b219f164 2082 webauth_4.5.3-5.dsc
 0f26b95d47b03ce93e9cb1197c52ff4b5882364b23e8680d7010083e515ebda7 27928 webauth_4.5.3-5.debian.tar.xz
 3ca9ad5db0a58806247f2cc4b9cafb16105d7fa2d9a8b0f5824d8e0d209d1520 221890 libapache2-mod-webauth_4.5.3-5_i386.deb
 8e06e67d7436be2c76bc21dc56ae685e95453fe23cad69f127b1ad20140659aa 87760 libapache2-mod-webauthldap_4.5.3-5_i386.deb
 ca07e68d4f9a565f29cd7dab07963da1fc4a31c91a3899180d0916201a4da033 107412 libapache2-mod-webkdc_4.5.3-5_i386.deb
 aaa7c42d6d5f0188c8b1efef8108fb5294481559454274200f2d62173300971b 49976 libapache2-webauth_4.5.3-5_all.deb
 f908c1658da1e25478259bf5e9d9fa61a797585d29f950ce84db5637b06b3af5 49208 libapache2-webkdc_4.5.3-5_all.deb
 e5a186af8b5684ad20d4df3c089ca92fb4004b535a7fa2dff4a97d210ff61a40 143416 libwebauth-perl_4.5.3-5_i386.deb
 47c4947b9c35b71b94a84f74154cf4ad3214af513fbee9a87b852f0cde9a52ac 82056 libwebauth10_4.5.3-5_i386.deb
 7d2cceead642db36dcd005ec8c6c0431302409563391664d5281dcd052d1c338 97856 libwebauth-dev_4.5.3-5_i386.deb
 6c7e1149ed2afad4b36d352e53fc66a4bd309acef97aed3e88f6adf5041e114f 116926 libwebkdc-perl_4.5.3-5_all.deb
 d778bc97559f060f8818464f61ea94dffd0639c65c956a4cc01189890d7a732f 60068 webauth-tests_4.5.3-5_all.deb
 baed0b779abef736a11b8e6080290cd055f0c3b47d8d40829abcea8a3bd7de6e 58238 webauth-utils_4.5.3-5_i386.deb
 85bdd2bb9f068de0d16f3578ab5bc8e265f3665c4e564301b11bf603246c79c9 117964 webauth-weblogin_4.5.3-5_all.deb
Files:
 d5ff30a4c8b6a94e43dad3c5be121b41 2082 web optional webauth_4.5.3-5.dsc
 899cf704d2c86542b896b4db95545d07 27928 web optional webauth_4.5.3-5.debian.tar.xz
 22dff9c54441544431586adc5afa0e12 221890 httpd optional libapache2-mod-webauth_4.5.3-5_i386.deb
 12e9c737a093e11f780851963b03b115 87760 httpd optional libapache2-mod-webauthldap_4.5.3-5_i386.deb
 66e4b28300f4df91738dbf54ff2dc1a8 107412 httpd optional libapache2-mod-webkdc_4.5.3-5_i386.deb
 bf488b792ebaf1bfb46a3ed46e88f128 49976 oldlibs extra libapache2-webauth_4.5.3-5_all.deb
 d3c036232fd1b73a0f523de6b5625bd0 49208 oldlibs extra libapache2-webkdc_4.5.3-5_all.deb
 31ac210c46258d5b8ee55b9faf5f721e 143416 perl optional libwebauth-perl_4.5.3-5_i386.deb
 f902dfea64ed1c576502889830606f05 82056 libs optional libwebauth10_4.5.3-5_i386.deb
 9f9e02eb9c79b920602acdb5c8a24d69 97856 libdevel extra libwebauth-dev_4.5.3-5_i386.deb
 d2557bab3086b15dee10521626b01bef 116926 perl optional libwebkdc-perl_4.5.3-5_all.deb
 524bbccd2410ae48573581c905212bb1 60068 web optional webauth-tests_4.5.3-5_all.deb
 00b68f2e8d6f53e64187fbd447b9daca 58238 web optional webauth-utils_4.5.3-5_i386.deb
 494cd32d7423c3969c4ad27ff5372083 117964 web optional webauth-weblogin_4.5.3-5_all.deb

Unverified

debian/4.5.3-4

96fb26cf · Add changelog entry for build fix · Jun 23, 2013

Debian release 4.5.3-4

Format: 1.8
Date: Sun, 23 Jun 2013 12:14:52 -0700
Source: webauth
Binary: libapache2-mod-webauth libapache2-mod-webauthldap libapache2-mod-webkdc libapache2-webauth libapache2-webkdc libwebauth-perl libwebauth10 libwebauth-dev libwebkdc-perl webauth-tests webauth-utils webauth-weblogin
Architecture: source i386 all
Version: 4.5.3-4
Distribution: unstable
Urgency: low
Maintainer: Russ Allbery <rra@debian.org>
Changed-By: Russ Allbery <rra@debian.org>
Description:
 libapache2-mod-webauth - Apache module for WebAuth authentication
 libapache2-mod-webauthldap - Apache module for WebAuth LDAP lookup and authorization
 libapache2-mod-webkdc - Apache modules for a WebAuth authentication KDC
 libapache2-webauth - Transitional package for WebAuth Apache modules
 libapache2-webkdc - Transitional package for WebAuth authentication KDC
 libwebauth-dev - Development files for WebAuth authentication
 libwebauth-perl - Perl library for WebAuth authentication
 libwebauth10 - Shared libraries for WebAuth authentication
 libwebkdc-perl - Perl libraries for WebAuth central login server
 webauth-tests - Tests for the WebAuth authentication modules
 webauth-utils - Command-line utilities for WebAuth authentication
 webauth-weblogin - Central login server for WebAuth authentication
Closes: 713452
Changes:
 webauth (4.5.3-4) unstable; urgency=low
 .
   * Apply upstream patch to fix incorrect linkage of some of the test
     programs.  (Closes: #713452)
Checksums-Sha1:
 49f7a5c9d174c8d78fdb835edf5538976e5caec7 2082 webauth_4.5.3-4.dsc
 f5b1f1c89e17b30ede983c2b03027b321b017fab 27800 webauth_4.5.3-4.debian.tar.xz
 19f42a8d7eca64ef2ceee8fc75f587bdd262cf58 222054 libapache2-mod-webauth_4.5.3-4_i386.deb
 80683e8e7ac7a53346e35f1c467342d1e2094d25 87726 libapache2-mod-webauthldap_4.5.3-4_i386.deb
 ffa577c08a38c08779558ace760bced0033fd374 107536 libapache2-mod-webkdc_4.5.3-4_i386.deb
 cef5fec181a7186596d886b803d906ff33c3220a 49888 libapache2-webauth_4.5.3-4_all.deb
 c0d325989fb59f481a557222a14a20b5b16baeee 49112 libapache2-webkdc_4.5.3-4_all.deb
 df7df86e5bd0d3c9c6a4da53da78276c520be96e 143622 libwebauth-perl_4.5.3-4_i386.deb
 7579e7c48613aeac2293b57cc2a7890bd8ab7dd0 82276 libwebauth10_4.5.3-4_i386.deb
 62edfafd21ebb17bed333a1bcbed13316f8ddcc5 97792 libwebauth-dev_4.5.3-4_i386.deb
 6bcd73bd2044b3b308150e036d1d8f2f886daa66 116818 libwebkdc-perl_4.5.3-4_all.deb
 b6286431ef0ff8b131723ffdb92b144b532b12d3 59976 webauth-tests_4.5.3-4_all.deb
 b5463f7acc313226e30e329a6e7a068502ab588b 58236 webauth-utils_4.5.3-4_i386.deb
 0209635c2b66378f3176c8ccd33dd3c6ae4344a8 117858 webauth-weblogin_4.5.3-4_all.deb
Checksums-Sha256:
 4c287134c7dfb1d2b5a931fa118fc55f56b8d7300d459441929b0d4413b4c120 2082 webauth_4.5.3-4.dsc
 6412c7b17235828e1e5ac37749caee68bb9b58793a7b07fbb858e73dc8ea5bac 27800 webauth_4.5.3-4.debian.tar.xz
 af01339e3eddb25ec8c686abde06f55b0e7f0bcd7ab023ad8a8797a62a6dc926 222054 libapache2-mod-webauth_4.5.3-4_i386.deb
 521ed555df3a397404fce639c88f870b04209a5cc81e2da1bb11276f53d98b2c 87726 libapache2-mod-webauthldap_4.5.3-4_i386.deb
 18e6ead3dddd04ae2e7ff2773f3f99e237ac1a6fa3ddcfa1e898e590032ba89c 107536 libapache2-mod-webkdc_4.5.3-4_i386.deb
 bbb55dc15646314aed327cb290dfc1e2d3737d5f37a8940e0bfd8c5149af137f 49888 libapache2-webauth_4.5.3-4_all.deb
 511341b1e4aec72cea884b0627c6f77058313c4bca31240be615bc7b35451dd6 49112 libapache2-webkdc_4.5.3-4_all.deb
 5d3ec3601fd086a977c324d94793d138f6b160baf63398170a50f5f71f8978db 143622 libwebauth-perl_4.5.3-4_i386.deb
 2a941ee595ff1785ff6644e4e6a26069bdf5aa6b751f71e2efdd27013322684f 82276 libwebauth10_4.5.3-4_i386.deb
 49dceecd3824d7d64a92e780e501d185f9a08c5c44ca28c77e77a83f470bc0ac 97792 libwebauth-dev_4.5.3-4_i386.deb
 4c55bd12714371b72c5fa59b86db97fb326ce30c481486818dae9f3d491c4b84 116818 libwebkdc-perl_4.5.3-4_all.deb
 2c12c47e2674d1e4bc2f964832910ca2136a07bae49a235a3b2b2592b1949f60 59976 webauth-tests_4.5.3-4_all.deb
 dbedd220cf3c2a656368f7a6cdaba2467a8fa95a421b4a9bde819587dbe27181 58236 webauth-utils_4.5.3-4_i386.deb
 a39fb4ef906d802e356c09cb56cd89beef7760847353b61daedef92f4d9305de 117858 webauth-weblogin_4.5.3-4_all.deb
Files:
 f60c5ec984ceef0fa7742d383932c755 2082 web optional webauth_4.5.3-4.dsc
 621ff9ffcc30a1b0250615aac4ae289c 27800 web optional webauth_4.5.3-4.debian.tar.xz
 a6998e8dd96450cf1814a769c4383013 222054 httpd optional libapache2-mod-webauth_4.5.3-4_i386.deb
 060dabb1f4a74288bcc2806923bc42da 87726 httpd optional libapache2-mod-webauthldap_4.5.3-4_i386.deb
 25860d50e418eafb07df6135500d0419 107536 httpd optional libapache2-mod-webkdc_4.5.3-4_i386.deb
 58a60eb2f026c55fa740a1cf89e602f4 49888 oldlibs extra libapache2-webauth_4.5.3-4_all.deb
 d89db8b2d0ea58ad5f8e517e19cde3f5 49112 oldlibs extra libapache2-webkdc_4.5.3-4_all.deb
 f408c4cc24732804c6ad0d7e80e3e3b6 143622 perl optional libwebauth-perl_4.5.3-4_i386.deb
 6e403f602137278d2dfd20b346d50041 82276 libs optional libwebauth10_4.5.3-4_i386.deb
 6160f5ee671cc0b6dcd5b05b33616fc4 97792 libdevel extra libwebauth-dev_4.5.3-4_i386.deb
 0f9c9777ea450295e88f3f9fb72c217a 116818 perl optional libwebkdc-perl_4.5.3-4_all.deb
 68c677e3941a8c9a043ffc36d88062d3 59976 web optional webauth-tests_4.5.3-4_all.deb
 356d1fa1e4e027352c3cb9574f14db25 58236 web optional webauth-utils_4.5.3-4_i386.deb
 29ee863518e63d3d0ed487cde4ac2c98 117858 web optional webauth-weblogin_4.5.3-4_all.deb

Unverified

debian/4.5.3-3

3f3cd935 · Also suppress module setup for mod_webauthldap · Jun 02, 2013

Debian release 4.5.3-3

Format: 1.8
Date: Sun, 02 Jun 2013 12:12:40 -0700
Source: webauth
Binary: libapache2-mod-webauth libapache2-mod-webauthldap libapache2-mod-webkdc libapache2-webauth libapache2-webkdc libwebauth-perl libwebauth10 libwebauth-dev libwebkdc-perl webauth-tests webauth-utils webauth-weblogin
Architecture: source i386 all
Version: 4.5.3-3
Distribution: unstable
Urgency: low
Maintainer: Russ Allbery <rra@debian.org>
Changed-By: Russ Allbery <rra@debian.org>
Description:
 libapache2-mod-webauth - Apache module for WebAuth authentication
 libapache2-mod-webauthldap - Apache module for WebAuth LDAP lookup and authorization
 libapache2-mod-webkdc - Apache modules for a WebAuth authentication KDC
 libapache2-webauth - Transitional package for WebAuth Apache modules
 libapache2-webkdc - Transitional package for WebAuth authentication KDC
 libwebauth-dev - Development files for WebAuth authentication
 libwebauth-perl - Perl library for WebAuth authentication
 libwebauth10 - Shared libraries for WebAuth authentication
 libwebkdc-perl - Perl libraries for WebAuth central login server
 webauth-tests - Tests for the WebAuth authentication modules
 webauth-utils - Command-line utilities for WebAuth authentication
 webauth-weblogin - Central login server for WebAuth authentication
Changes:
 webauth (4.5.3-3) unstable; urgency=low
 .
   * Move mod_webauthldap into a separate libapache2-mod-webauthldap
     package.  This permits better dependencies, more closely conforms to
     the Apache module naming convention, and allows users who aren't
     interested in the LDAP module to easily remove it.  Note that the
     libapache2-mod-webauth package does not attempt to clean up
     configuration files left behind from the mod_webauthldap module, since
     nearly all users upgrading from an older version will end up with both
     packages installed, and removal of libapache2-mod-webauthldap will do
     the right thing.  Additional cleanup would only be needed for people
     upgrading from experimental versions of libapache2-mod-webauth who do
     not install libapache2-mod-webauthldap and doesn't seem worth the
     complexity.
   * Add proper Breaks/Replaces for the Apache module package renaming.
   * Pass LDFLAGS from the main build to the Perl module build so that the
     hardening flags are set properly.
Checksums-Sha1:
 c4617bb11e09d59f157939bbff16a778fde82af7 2082 webauth_4.5.3-3.dsc
 b73c0db63afee9ecd34dd263e72ee17e49ed0593 27520 webauth_4.5.3-3.debian.tar.xz
 4b22905ba474a8df0785a01abeee33acdd3a1c8b 222196 libapache2-mod-webauth_4.5.3-3_i386.deb
 2cbb1d80c8f7bcd45bb2ddb3583916f664100d32 87764 libapache2-mod-webauthldap_4.5.3-3_i386.deb
 cfa72e70d931d542ad2eeb494e68a1852cd1ad39 107832 libapache2-mod-webkdc_4.5.3-3_i386.deb
 b39d7c68c1c30922bf4ecd153711954d46d90996 49820 libapache2-webauth_4.5.3-3_all.deb
 11621d058db05fd1afa45358ed68bd383522ecd9 49054 libapache2-webkdc_4.5.3-3_all.deb
 d9aa60893ae0e6eddef4624bc139178e1565aae4 143520 libwebauth-perl_4.5.3-3_i386.deb
 ab9e0bcfaa54749aeaae92c75a9e7cccb85a436e 83210 libwebauth10_4.5.3-3_i386.deb
 74664dc477ef11b9eec93e4f7c00bf35c8aab35e 98634 libwebauth-dev_4.5.3-3_i386.deb
 6ce515ad9064a30448b04d78623727b7cfd85ac0 116784 libwebkdc-perl_4.5.3-3_all.deb
 f44ae3f19bfe894d454782491586d8bc965b486a 59916 webauth-tests_4.5.3-3_all.deb
 ce66bf72875acbec8c4bf43e0491a31ee99be698 58154 webauth-utils_4.5.3-3_i386.deb
 466766cdf6ada4246b7bbde4470f8c96c5097971 117806 webauth-weblogin_4.5.3-3_all.deb
Checksums-Sha256:
 27f5f17472cdf8b678e1f33ceb7cea78dd0cf2fdbe14b9c0608dcba6c4f243ff 2082 webauth_4.5.3-3.dsc
 bf74667c8d19d10d9e75edeb0f33a593f6bd0527d263211413f016b810459ed2 27520 webauth_4.5.3-3.debian.tar.xz
 db7ca52eac860c93b47c5cd57c411f3750d76c1f35f42a00b0ed07a5bfa43020 222196 libapache2-mod-webauth_4.5.3-3_i386.deb
 afa3737e8ddfae6ed2a8bcbf0b00fd63982293a56b792e3967bb895f14390e9f 87764 libapache2-mod-webauthldap_4.5.3-3_i386.deb
 f1f9de8c5feebc760e3b7c4a7be4b5f81c0e61124577d76d4103efc60aea7f2b 107832 libapache2-mod-webkdc_4.5.3-3_i386.deb
 97425281c1f90597813ac8a95753996124a4e1b0079f3161bdd67962dbce7160 49820 libapache2-webauth_4.5.3-3_all.deb
 d3ca0d555d41571a95ac49418eec02b62d2bc001fba547cb22cdda59eb42d699 49054 libapache2-webkdc_4.5.3-3_all.deb
 699089f6d5754e2a885800a857e84a6bc73e8fb33a7aec3771333aea4102d2ec 143520 libwebauth-perl_4.5.3-3_i386.deb
 7b046ba1ff2f411815242f39a633999efea6bb753e629ec2791a6f23e91e65d0 83210 libwebauth10_4.5.3-3_i386.deb
 2c56a6808d7e884dde882f30c51da6f3559263cd7e57eb58460765e15182ab8c 98634 libwebauth-dev_4.5.3-3_i386.deb
 471dbe20deb28fe57dfd77b101c8816b7404b88033e653125563496026c43cd5 116784 libwebkdc-perl_4.5.3-3_all.deb
 e7da1a1860e1f4c70d8ebde6a89b9731eb4f5a5c569f4e991796bca8d4e76cbe 59916 webauth-tests_4.5.3-3_all.deb
 79433a8e36a89d34f17281026ef626ad214fdf36e08268b9280e21668b131db4 58154 webauth-utils_4.5.3-3_i386.deb
 1ef1fba1b7b91fe0312e6779f9cb20cdf2c58516ef7ff3e6aac0357903c4e566 117806 webauth-weblogin_4.5.3-3_all.deb
Files:
 d657ea2159900099ae3b834dc0d9c522 2082 web optional webauth_4.5.3-3.dsc
 31d3f1b53c3add494ad756bfe8a6e21a 27520 web optional webauth_4.5.3-3.debian.tar.xz
 91f45c8b02cdd3b6dbeaf8aa17aa07ba 222196 httpd optional libapache2-mod-webauth_4.5.3-3_i386.deb
 e17776cfe9d034d1186ec4048a9980f6 87764 httpd optional libapache2-mod-webauthldap_4.5.3-3_i386.deb
 bfa23b7db5d4175f6b74d8ece2beabb5 107832 httpd optional libapache2-mod-webkdc_4.5.3-3_i386.deb
 f37f2a307f0c448bb77c09f3655dcb1a 49820 oldlibs extra libapache2-webauth_4.5.3-3_all.deb
 5835ea7487b48b552ce0d85a1a7dbb1d 49054 oldlibs extra libapache2-webkdc_4.5.3-3_all.deb
 df14d972c349790cbed6ea7e31761b5b 143520 perl optional libwebauth-perl_4.5.3-3_i386.deb
 6a29c691f048609c07d306c84f5acb1d 83210 libs optional libwebauth10_4.5.3-3_i386.deb
 7542e3a52df76a308c1e3edfaeddb936 98634 libdevel extra libwebauth-dev_4.5.3-3_i386.deb
 5a22e6314b2c3c77c45355f6ef975594 116784 perl optional libwebkdc-perl_4.5.3-3_all.deb
 4647076b81c0fb3b401b3488d9d1d988 59916 web optional webauth-tests_4.5.3-3_all.deb
 a2a7dff022cc0eee42df48e5aaac426f 58154 web optional webauth-utils_4.5.3-3_i386.deb
 68855ad58118b988ef8c32904314e985 117806 web optional webauth-weblogin_4.5.3-3_all.deb

Unverified

debian/4.5.3-2

4c1f1d1e · Finalize changes for 4.5.3-2 · May 30, 2013

Debian release 4.5.3-2

Format: 1.8
Date: Thu, 30 May 2013 19:43:23 -0700
Source: webauth
Binary: libapache2-mod-webauth libapache2-mod-webkdc libapache2-webauth libapache2-webkdc libwebauth-perl libwebauth10 libwebauth-dev libwebkdc-perl webauth-tests webauth-utils webauth-weblogin
Architecture: source i386 all
Version: 4.5.3-2
Distribution: unstable
Urgency: low
Maintainer: Russ Allbery <rra@debian.org>
Changed-By: Russ Allbery <rra@debian.org>
Description:
 libapache2-mod-webauth - Apache modules for WebAuth authentication
 libapache2-mod-webkdc - Apache modules for a WebAuth authentication KDC
 libapache2-webauth - Transitional package for WebAuth Apache modules
 libapache2-webkdc - Transitional package for WebAuth authentication KDC
 libwebauth-dev - Development files for WebAuth authentication
 libwebauth-perl - Perl library for WebAuth authentication
 libwebauth10 - Shared libraries for WebAuth authentication
 libwebkdc-perl - Perl libraries for WebAuth central login server
 webauth-tests - Tests for the WebAuth authentication modules
 webauth-utils - Command-line utilities for WebAuth authentication
 webauth-weblogin - Central login server for WebAuth authentication
Changes:
 webauth (4.5.3-2) unstable; urgency=low
 .
   * Upload to unstable.
   * Now that dh_apache2 has an option to not enable the modules by
     default, let it handle all module setup for libapache2-mod-webauth
     except for the Apache restart and remove the now-unnecessary prerm
     script.
   * Simplify libcgi-application-perl Depends and Build-Depends by dropping
     the alternatives that were required for squeeze.
   * Add build dependency on dh-apache2 per the dh_apache2 manual page.
Checksums-Sha1:
 04853a930786a97e56d5e79b4c0fcb53eeb9755e 2547 webauth_4.5.3-2.dsc
 a65318e2927a0eff87d7daf9888ff23c815c6253 26152 webauth_4.5.3-2.debian.tar.xz
 5a62ead572db24fb775e409b8a13f0859e6eae5f 242524 libapache2-mod-webauth_4.5.3-2_i386.deb
 197ec26138f8f5a585f9e2d0e23ea1e3112383f1 107480 libapache2-mod-webkdc_4.5.3-2_i386.deb
 c32d1ca98848bfd5a80b406070de7037a74765da 49378 libapache2-webauth_4.5.3-2_all.deb
 9b5a1514690ba0c5bf74f1eabd0c4fbeb02f4fe4 48722 libapache2-webkdc_4.5.3-2_all.deb
 87bd96b0fa3a23ebe12568da3167b4da73077da2 143096 libwebauth-perl_4.5.3-2_i386.deb
 1c1f19dc89d64522f6322584feb9d5408b3c59e4 82912 libwebauth10_4.5.3-2_i386.deb
 14aae4cf78a541f9b491a6916a56a85e363e77f3 98294 libwebauth-dev_4.5.3-2_i386.deb
 4f1295768373ef74c810baa5d011de5ec26aef35 116438 libwebkdc-perl_4.5.3-2_all.deb
 146d3ad3c1c5bbafb839798d93b0496624fefe02 59594 webauth-tests_4.5.3-2_all.deb
 684b4ceb3ec6110bf170fdc6d6778b38533caf3d 57836 webauth-utils_4.5.3-2_i386.deb
 c83ceb24a5ef2b0f7ba654c7493601edd8cd6519 117474 webauth-weblogin_4.5.3-2_all.deb
Checksums-Sha256:
 fbe96212254bc1bbdaa1050bdfb735cfb8b71099191f5ec360552aa9c6d14a2e 2547 webauth_4.5.3-2.dsc
 128d794ff6b33effdb72bceae6745881f5b0cc582cc6bb941c8c7c4817c19e8d 26152 webauth_4.5.3-2.debian.tar.xz
 8f376ff7a3eb80b232d1bcf3467188ac1657f74a0a2f564f91ad21b1cea764e2 242524 libapache2-mod-webauth_4.5.3-2_i386.deb
 3175ef4a754a0a471dc683cbf21ed4adb9224429bae77330f0c9dd14856391a9 107480 libapache2-mod-webkdc_4.5.3-2_i386.deb
 fc69747a1631ffe36ae38c7281b95bfe481611e52311610a0f043d23e999df7c 49378 libapache2-webauth_4.5.3-2_all.deb
 626e320d2338e90953f5b4cab3a3a5d0633769eba621fc8c8bde4ecc62dedd08 48722 libapache2-webkdc_4.5.3-2_all.deb
 0e1bc46780c4673713f70dd9425d9790b99ff762d5a932e156d1b8d67ee23280 143096 libwebauth-perl_4.5.3-2_i386.deb
 565acbd21eff1398ab7115ea130533b3d4b3c439141e5a83383dec957b1442db 82912 libwebauth10_4.5.3-2_i386.deb
 d13617add23194a7f84bc2f25fc6ddbb1c3451ed0ea4f3542ed178a3235592a0 98294 libwebauth-dev_4.5.3-2_i386.deb
 1de2c45cece4e4283dcffa9cf67c2fe824d1f8d5f7761a7d0e1c6adc0d885d3e 116438 libwebkdc-perl_4.5.3-2_all.deb
 7c2fc39b0f3cbb546fdafee3b8e9c4db31b25803b63de979d074693ee5586d73 59594 webauth-tests_4.5.3-2_all.deb
 99f075e5099fd39c2273d62f677b6bd8a82a335da230756f68377ef9517ec8e4 57836 webauth-utils_4.5.3-2_i386.deb
 c220abc9d1077812fec69599ccc4af313fd256edad0ab275e1346f0d7055b459 117474 webauth-weblogin_4.5.3-2_all.deb
Files:
 7c3a632464f695004582aa2da376a2b7 2547 web optional webauth_4.5.3-2.dsc
 7d2b5ee68c75489ee3b0363fef041709 26152 web optional webauth_4.5.3-2.debian.tar.xz
 808a0c2b5d5224cb789bab0c12776ae8 242524 httpd optional libapache2-mod-webauth_4.5.3-2_i386.deb
 fefd61a68f80493955cddbae094dbce8 107480 httpd optional libapache2-mod-webkdc_4.5.3-2_i386.deb
 57e1aa111770e285aea7b9717cc51ed5 49378 oldlibs extra libapache2-webauth_4.5.3-2_all.deb
 6a66a895d57722a771314491e1c3ef50 48722 oldlibs extra libapache2-webkdc_4.5.3-2_all.deb
 68bdf18fb6e5a22a787c20316261d935 143096 perl optional libwebauth-perl_4.5.3-2_i386.deb
 f5e84153020f140db770d491ecbf269f 82912 libs optional libwebauth10_4.5.3-2_i386.deb
 18d66ad646445b25055c672c5f9ad0c2 98294 libdevel extra libwebauth-dev_4.5.3-2_i386.deb
 ace63e146ee8c9679521723c6704ba8a 116438 perl optional libwebkdc-perl_4.5.3-2_all.deb
 2df38687be906912a0b9e507e58dc3a2 59594 web optional webauth-tests_4.5.3-2_all.deb
 54fc6e7b15ef4da2131423455e0c315e 57836 web optional webauth-utils_4.5.3-2_i386.deb
 3e704ea88d7dbac5716e5697905ccee5 117474 web optional webauth-weblogin_4.5.3-2_all.deb

Unverified

debian/4.5.3-1_sbp60+1

89e6d6a2 · Merge branch 'debian' into squeeze-backports · May 15, 2013

Debian release 4.5.3-1~sbp60+1

Format: 1.8
Date: Wed, 15 May 2013 14:26:12 PDT
Source: webauth
Binary: libapache2-webauth libapache2-webkdc libwebauth-perl libwebauth10 libwebauth-dev libwebkdc-perl webauth-tests webauth-utils webauth-weblogin
Architecture: all amd64 i386 source
Version: 4.5.3-1~sbp60+1
Distribution: oldstable
Urgency: low
Maintainer: Russ Allbery <rra@debian.org>
Changed-By: Russ Allbery <rra@debian.org>
Description:
 libapache2-webauth - Apache modules for WebAuth authentication
 libapache2-webkdc - Apache 2 modules for a WebAuth authentication KDC
 libwebauth-dev - Development files for WebAuth authentication
 libwebauth-perl - Perl library for WebAuth authentication
 libwebauth10 - Shared libraries for WebAuth authentication
 libwebkdc-perl - Perl libraries for WebAuth central login server
 webauth-tests - Tests for the WebAuth authentication modules
 webauth-utils - Command-line utilities for WebAuth authentication
 webauth-weblogin - Central login server for WebAuth authentication
Changes:
 webauth (4.5.3-1~sbp60+1) oldstable; urgency=low
 .
   * Backport to squeeze, preserving changes from the previous backport.
   * Revert the changes to README.Debian.
Checksums-Sha256:
 1295b9b49e378d58b4b397c55646c178095368fbcc1f6c492752a53768caa922 2329 webauth_4.5.3-1~sbp60+1.dsc
 d91f6c214dbf2a81a7958dad2ca7b11d0201baa5c77662376daca88db5c7a677 26512 webauth_4.5.3-1~sbp60+1.debian.tar.xz
 7b29e4ee9ce00b5cb8762fb76f7837fb35c0af94407a8ed75d7554ade6be9181 241670 libapache2-webauth_4.5.3-1~sbp60+1_i386.deb
 79e2f3877f04693569b2e572beefb91cb84b8bc6e1718e07ece2cc7d7eecbfda 107330 libapache2-webkdc_4.5.3-1~sbp60+1_i386.deb
 774d26dca0649b62b034e96bb67493aafbf8aa7c5025a2b6e2f80a568689cff0 146844 libwebauth-perl_4.5.3-1~sbp60+1_i386.deb
 033d25cfd66fd3e9c916d2e0709a149a8f51232b24493385fb4bbbeb70cc9b82 80366 libwebauth10_4.5.3-1~sbp60+1_i386.deb
 e1a04bafbe343d04c83bc23c5a3e0c066e6dfc3e836c445f9d243b6fc4e9c695 95678 libwebauth-dev_4.5.3-1~sbp60+1_i386.deb
 1b307c87d2463f98073d82c26a9ace89347d34c8a08408ea5bce565c8fc1e20f 116614 libwebkdc-perl_4.5.3-1~sbp60+1_all.deb
 1bf30c66daf944d8341494be3d044c1dccc938520ae2007eb7c529de39a89f91 59726 webauth-tests_4.5.3-1~sbp60+1_all.deb
 e0d1119bcddd650bd19c2fa996cb5759df699299fb7076da50a3d9f71b4c6477 57316 webauth-utils_4.5.3-1~sbp60+1_i386.deb
 8813b6f351fefcc27a2c05d39fd687a19c8f307fd41941e1d4c4e31b0a72b5fb 117618 webauth-weblogin_4.5.3-1~sbp60+1_all.deb
 aeb41ca560d067da88248b72acc1de210b734f097559c019aa55e8ff96896e8d 244086 libapache2-webauth_4.5.3-1~sbp60+1_amd64.deb
 0918d139c38c875d46508c424ae00447cfd9567f907c79a51f2c539ab799fb6b 108206 libapache2-webkdc_4.5.3-1~sbp60+1_amd64.deb
 219a16caafb98af61d8661ac8ea3eda6f3f032803f014413743409f5ec8bd010 147320 libwebauth-perl_4.5.3-1~sbp60+1_amd64.deb
 ab0072fb4613a13c078402eee644a336a0cfede0f980df3be4a3dd0c92ff7a3c 82620 libwebauth10_4.5.3-1~sbp60+1_amd64.deb
 64d34b2bfda50e3fd05e296f0be48e4bd8be8ccebfcee4f03f38b88834662ed5 99466 libwebauth-dev_4.5.3-1~sbp60+1_amd64.deb
 6b7614be58c05abbf3fcf87540b84c3423411463386564d76683c8d84062e835 58614 webauth-utils_4.5.3-1~sbp60+1_amd64.deb
 2b19b756da31aa1835ef59c4ad3667b1ca8e917917cb3f14252de4cb41265d6a 861932 webauth_4.5.3.orig.tar.xz
Checksums-Sha1:
 47a664768773c64eff39390e21df78ae2b3fd492 2329 webauth_4.5.3-1~sbp60+1.dsc
 46a37682e9ee46f6a9ff8d88b299a512039b77b9 26512 webauth_4.5.3-1~sbp60+1.debian.tar.xz
 36a72943058ab50149c5181b35cb4549389f9ec7 241670 libapache2-webauth_4.5.3-1~sbp60+1_i386.deb
 351e951282159d27564e23f2f1948e2186a8fa3e 107330 libapache2-webkdc_4.5.3-1~sbp60+1_i386.deb
 f9fb12b7aa3532e4c1fae205de3bb89dad4db53a 146844 libwebauth-perl_4.5.3-1~sbp60+1_i386.deb
 9f36f0dc858b841fbd72a20a69992c0add1f54ff 80366 libwebauth10_4.5.3-1~sbp60+1_i386.deb
 981a24dad41456b241d4f47011b81a35ecf77b50 95678 libwebauth-dev_4.5.3-1~sbp60+1_i386.deb
 cfe08dcf0f8ccbf4db048f91cee5812c4c26df5b 116614 libwebkdc-perl_4.5.3-1~sbp60+1_all.deb
 da93108873ed780c291b0cd03568a4e51ff20045 59726 webauth-tests_4.5.3-1~sbp60+1_all.deb
 3396124986df592655123771993d4b1b6c3d1365 57316 webauth-utils_4.5.3-1~sbp60+1_i386.deb
 23165ccd6a82d70c34725a312683eff98db782f7 117618 webauth-weblogin_4.5.3-1~sbp60+1_all.deb
 25449a228bb2c05105580d3a4c72b54aaa05f10f 244086 libapache2-webauth_4.5.3-1~sbp60+1_amd64.deb
 3eb92df80c677e09738ba3f025a0246634b3bd3d 108206 libapache2-webkdc_4.5.3-1~sbp60+1_amd64.deb
 cd0b19c39850c8a957182d60c489e70a0007f5e8 147320 libwebauth-perl_4.5.3-1~sbp60+1_amd64.deb
 ab80df90010373129a86e127eb6f9a619f0338cc 82620 libwebauth10_4.5.3-1~sbp60+1_amd64.deb
 4e5c5794d0ee5ac1887d45397423909ea0b4f81e 99466 libwebauth-dev_4.5.3-1~sbp60+1_amd64.deb
 72acd5d6023ba06aaee1ab5feb9da70d7464d3ca 58614 webauth-utils_4.5.3-1~sbp60+1_amd64.deb
 8b086b9204ed998462511af7cb17d4f809a1947b 861932 webauth_4.5.3.orig.tar.xz
Files:
 61ca3a9fc2d9649515b99a2eb9d213bf 2329 web optional webauth_4.5.3-1~sbp60+1.dsc
 735832665e395cdca4a5a7df547a7523 26512 web optional webauth_4.5.3-1~sbp60+1.debian.tar.xz
 5c65ac9d01fd6cc2b2c4599b7bae333d 241670 httpd optional libapache2-webauth_4.5.3-1~sbp60+1_i386.deb
 a61d08ada3048235f293ac80d7799c3e 107330 httpd optional libapache2-webkdc_4.5.3-1~sbp60+1_i386.deb
 925345483162f016e4244b59a3dfa700 146844 perl optional libwebauth-perl_4.5.3-1~sbp60+1_i386.deb
 88580bfaa142f21444811a10ed9b4cda 80366 libs optional libwebauth10_4.5.3-1~sbp60+1_i386.deb
 b8e369cf7c7abdb92d0a9c25372e7d29 95678 libdevel extra libwebauth-dev_4.5.3-1~sbp60+1_i386.deb
 2a502c5652a653f6b310268bce1d419c 116614 perl optional libwebkdc-perl_4.5.3-1~sbp60+1_all.deb
 45e9a4b53433d95c9b58df97e8ea1d30 59726 web optional webauth-tests_4.5.3-1~sbp60+1_all.deb
 d0ed6f35b0930e90ea9dedfea624f5e1 57316 web optional webauth-utils_4.5.3-1~sbp60+1_i386.deb
 29c2841da0e6beb592714f56375dad2a 117618 web optional webauth-weblogin_4.5.3-1~sbp60+1_all.deb
 b3aa965629ed10704108b2e470974baa 244086 httpd optional libapache2-webauth_4.5.3-1~sbp60+1_amd64.deb
 87674a1d623a7a42ef27c808a8872f7d 108206 httpd optional libapache2-webkdc_4.5.3-1~sbp60+1_amd64.deb
 24f8beb2446b1dba672d77a775f282d6 147320 perl optional libwebauth-perl_4.5.3-1~sbp60+1_amd64.deb
 90ef5b79eacd1460df348acd50059cc0 82620 libs optional libwebauth10_4.5.3-1~sbp60+1_amd64.deb
 8df8d125ac31d7cddb97841240cd98da 99466 libdevel extra libwebauth-dev_4.5.3-1~sbp60+1_amd64.deb
 7cf5c47e50d9c07c080e98549c7a8b00 58614 web optional webauth-utils_4.5.3-1~sbp60+1_amd64.deb
 3aabcb99a80c30870f77b87a1a31e437 861932 web optional webauth_4.5.3.orig.tar.xz

Unverified

debian/4.5.3-1

9b721c2d · Finalize changes for 4.5.3-1 · May 15, 2013

Debian release 4.5.3-1

Format: 1.8
Date: Wed, 15 May 2013 13:57:37 -0700
Source: webauth
Binary: libapache2-mod-webauth libapache2-mod-webkdc libapache2-webauth libapache2-webkdc libwebauth-perl libwebauth10 libwebauth-dev libwebkdc-perl webauth-tests webauth-utils webauth-weblogin
Architecture: source i386 all
Version: 4.5.3-1
Distribution: experimental
Urgency: low
Maintainer: Russ Allbery <rra@debian.org>
Changed-By: Russ Allbery <rra@debian.org>
Description:
 libapache2-mod-webauth - Apache modules for WebAuth authentication
 libapache2-mod-webkdc - Apache modules for a WebAuth authentication KDC
 libapache2-webauth - Transitional package for WebAuth Apache modules
 libapache2-webkdc - Transitional package for WebAuth authentication KDC
 libwebauth-dev - Development files for WebAuth authentication
 libwebauth-perl - Perl library for WebAuth authentication
 libwebauth10 - Shared libraries for WebAuth authentication
 libwebkdc-perl - Perl libraries for WebAuth central login server
 webauth-tests - Tests for the WebAuth authentication modules
 webauth-utils - Command-line utilities for WebAuth authentication
 webauth-weblogin - Central login server for WebAuth authentication
Changes:
 webauth (4.5.3-1) experimental; urgency=low
 .
   * New upstream release.
     - SECURITY: Clear header state between requests to avoid information
       leaks or infinite redirects for WebLogin servers using FastCGI and
       $REMUSER_REDIRECT (not the default).  The vulnerability was
       introduced in WebAuth 4.4.1.  All versions of WebAuth with this
       vulnerability were only uploaded to Debian experimental.
Checksums-Sha1:
 2fe7792cd458abcad0cf932ebc7b8c09f03ec4e5 2211 webauth_4.5.3-1.dsc
 8b086b9204ed998462511af7cb17d4f809a1947b 861932 webauth_4.5.3.orig.tar.xz
 fbb4fee1f143bcdaff015e062c91e287b519eb35 26136 webauth_4.5.3-1.debian.tar.xz
 2e1792cafe0266df00db943a9b0ba3edb0242437 242348 libapache2-mod-webauth_4.5.3-1_i386.deb
 8201219b079af11258d288d6b610eb0c40fc1a2b 107268 libapache2-mod-webkdc_4.5.3-1_i386.deb
 a09c45ad852fb9eb39fac7bd76e490c33d3498a4 49192 libapache2-webauth_4.5.3-1_all.deb
 99123bf7cf1edd77d4927c106a7e18c1919b5218 48544 libapache2-webkdc_4.5.3-1_all.deb
 b67554ba8e086e3bc2547700b0f8fe7af8b6369b 142810 libwebauth-perl_4.5.3-1_i386.deb
 62cf94f4d299e6a1d7e05a868d937516d1e5cbd3 82738 libwebauth10_4.5.3-1_i386.deb
 e4bd9ce69e6b2b83d47ac27eb8ba779b71fc9e13 98138 libwebauth-dev_4.5.3-1_i386.deb
 ac7dfe49f3e6a4263ec800c55fdbfaa6cee92bcc 116272 libwebkdc-perl_4.5.3-1_all.deb
 bce2b8f1c489d96924a26f57605fb128f81c39ca 59396 webauth-tests_4.5.3-1_all.deb
 095d5952a2cc49857fb3b94fed30a4e13693e49c 57646 webauth-utils_4.5.3-1_i386.deb
 12ce3f16ca8f44dc4f11b5895fced0de50046c11 117280 webauth-weblogin_4.5.3-1_all.deb
Checksums-Sha256:
 57a07f89c9af4ef8d3e7bcf9e4a9caa5ae089ae50b301ce26bc5e50ceb581aac 2211 webauth_4.5.3-1.dsc
 2b19b756da31aa1835ef59c4ad3667b1ca8e917917cb3f14252de4cb41265d6a 861932 webauth_4.5.3.orig.tar.xz
 d2da637f1342fc6b3c3380f941e58baa797de7f30150eb2362140588b9a945b0 26136 webauth_4.5.3-1.debian.tar.xz
 0b9f2e2a25117e23337720544632eb66bee2942123a7f5f870de819a41abcdea 242348 libapache2-mod-webauth_4.5.3-1_i386.deb
 4be8a45b312082180fc1a83f40dc4427e928858c6114a800bc23dfada1b19858 107268 libapache2-mod-webkdc_4.5.3-1_i386.deb
 c73667879a69a8dbe4aeacacda0988cbee3cedf3f35af6113f0d942d702a2353 49192 libapache2-webauth_4.5.3-1_all.deb
 92d283495c8997c8397f90158aefb9e8cd68786185f094cce18822acf4552a77 48544 libapache2-webkdc_4.5.3-1_all.deb
 1d391ec610e1a1d9bb768eb0c2927065929a7677f07e26f0ce02c07997ec3de3 142810 libwebauth-perl_4.5.3-1_i386.deb
 003b03eede7ad2ce29ca09afcdf9de047a1693221a3a13608ea2cf267dc6bbde 82738 libwebauth10_4.5.3-1_i386.deb
 bfadd213762400f00035b2af9dc9ad4da22ff3e355df3be6bf0b80858c8877c0 98138 libwebauth-dev_4.5.3-1_i386.deb
 bba75e434dea7bd933c511ccc13e1c325ecf33f0c2e55b754f6dba0596adce6c 116272 libwebkdc-perl_4.5.3-1_all.deb
 e012f0e9e21207f443c30a65018d30ec67ae550d93a23974a3e41a92e4cb7e84 59396 webauth-tests_4.5.3-1_all.deb
 c0cd4b365d13a9f2a16855ca3cf900d888540e4d5818d885df8eecc11c2ae115 57646 webauth-utils_4.5.3-1_i386.deb
 149fcd9c74d2b14b93a9b4eb06b5cca1aa0e5c7ba113e96f6ac75b48c134e309 117280 webauth-weblogin_4.5.3-1_all.deb
Files:
 f6e34d60423651e37d9c156183bb6ea0 2211 web optional webauth_4.5.3-1.dsc
 3aabcb99a80c30870f77b87a1a31e437 861932 web optional webauth_4.5.3.orig.tar.xz
 37a2c5266e2b0ab03af86687b90b04b7 26136 web optional webauth_4.5.3-1.debian.tar.xz
 e6e47a987b6eec49986408ed12246c7d 242348 httpd optional libapache2-mod-webauth_4.5.3-1_i386.deb
 785ae0c04d6d087925f9667d5977e42e 107268 httpd optional libapache2-mod-webkdc_4.5.3-1_i386.deb
 ecf11b275213677a467cae675fa9d901 49192 oldlibs extra libapache2-webauth_4.5.3-1_all.deb
 154e01128a80838f44dceabe17d763e7 48544 oldlibs extra libapache2-webkdc_4.5.3-1_all.deb
 62666970bdd3ccba33be2e06a43dbca2 142810 perl optional libwebauth-perl_4.5.3-1_i386.deb
 db1fdd8117385fe255e0b88ef2e8bc86 82738 libs optional libwebauth10_4.5.3-1_i386.deb
 910a7679e8b3be1ce901b475d1122a0c 98138 libdevel extra libwebauth-dev_4.5.3-1_i386.deb
 83f7b4208dff174a38d98bd5da3db0eb 116272 perl optional libwebkdc-perl_4.5.3-1_all.deb
 2adb122939479f933a047007af4ad3bb 59396 web optional webauth-tests_4.5.3-1_all.deb
 c509758ca6a4d0abf7e0cf2249d8df0e 57646 web optional webauth-utils_4.5.3-1_i386.deb
 ff4e162f7d883cade867e695769f7f0f 117280 web optional webauth-weblogin_4.5.3-1_all.deb

Unverified

upstream/4.5.3

c0987f7f · Imported Upstream version 4.5.3 · May 15, 2013
```
Upstream version 4.5.3
```