Summary:	A Pluggable Authentication Module for Kerberos 5
Name:		pam_krb5_debian
Version:	4.11
Release:	0%{?dist}
License:	MIT
Group:		System/Libraries
URL:		http://www.eyrie.org/~eagle/software/pam-krb5
Source0:	http://archives.eyrie.org/software/kerberos/pam-krb5-%{version}.tar.xz
Conflicts:	pam_krb5
Provides:	pam_krb5 = %{version}-%{release}
Requires:	pam
Requires:	krb5-libs
BuildRequires:	byacc
BuildRequires:	flex
BuildRequires:	krb5-devel
BuildRequires:	pam-devel

%description 
pam-krb5 is a Kerberos v5 PAM module for either MIT Kerberos or
Heimdal.  It supports ticket refreshing by screen savers, configurable
authorization handling, authentication of non-local accounts for
network services, password changing, and password expiration, as well
as all the standard expected PAM features.  It works correctly with
OpenSSH, even with ChallengeResponseAuthentication and PrivilegeSeparation enabled, and supports extensive configuration
either by PAM options or in krb5.conf or both.  PKINIT is supported
with recent versions of both MIT Kerberos and Heimdal and FAST is
supported with recent MIT Kerberos.
  
This module is not the Kerberos v5 PAM module maintained on Sourceforge and
used on Red Hat systems.  It is an independent implementation that, if
it ever shared any common code, diverged long ago.  It supports some
features that the Sourceforge module does not (particularly around
authorization), and does not support some options (particularly ones not
directly related to Kerberos v5) that it does.  This module will never
support Kerberos v4 or AFS.

%prep 
%setup -q -n pam-krb5-%{version}

%build
%configure --libdir=/%{_lib}
make %{?_smp_mflags}

%install
make install DESTDIR=%{buildroot} INSTALL="install -p"

# Make the paths jive to avoid conflicts on multilib systems.
sed -ri -e 's|/lib(64)?/|/\$LIB/|g' %{buildroot}/%{_mandir}/man*/pam_krb5*.5*

# cleanup
rm -f %{buildroot}/%{_lib}/security/*.la

%files
%defattr(-,root,root)
%doc README LICENSE NEWS TODO
/%{_lib}/security/*
/%{_mandir}/man5/*


%changelog
* Fri Dec 3 2021 Pat Riehecky <riehecky@fnal.gov> 4.11-0
- New upstream release

* Mon Oct 26 2020 Pat Riehecky <riehecky@fnal.gov> 4.9-0
- New upstream security release

* Wed Feb 5 2020 Pat Riehecky <riehecky@fnal.gov> 4.8-0
- New upstream release

* Thu Jan 8 2015 Pat Riehecky <riehecky@fnal.gov> 4.7-0
- New upstream release

* Wed Nov 28 2012 Pat Riehecky <riehecky@fnal.gov> 4.6-0
- New upstream release

* Mon Aug 15 2011 Pat Riehecky <riehecky@fnal.gov> 4.4-0
+ Ported from Mandriva
+ reset build number since there are no patches applied

* Thu Mar 24 2011 Lev Givon <lev@mandriva.org> 4.4-1mdv2010.1
+ Revision: 648185
- import pam_krb5_debian