< September 2021 | Russ Allbery > Eagle's Path | November 2021 > |
The primary change in this release of my Kerberos PAM module is support
for calling pam_end
with PAM_DATA_SILENT
. I had not known
that the intent of this flag was to signal that only process resources
were being cleaned up and external resources should not be (in part
because an older version of the man page doesn't make this clear).
This flag is used when a proces forks with an open PAM library handle and wants to clean it up in the child process. In previous versions, this would delete the user's ticket cache, which is not the desired behavior. This version correctly leaves the ticket cache alone.
The implementation required some improvements to the PAM testing framework to support this case as well.
The other significant change in this release is that the build system no
longer attempts to guess the correct PAM module installation path and
instead documents that to install the module in a Linux system PAM module
path, you will probably need to set --libdir
explicitly. The logic
used to decide between Debian and Red Hat multiarch paths broke in the
presence of Debian usrmerge systems and was incredibly fragile even before
that, so I've now dropped it completely.
You can get the latest version from the pam-krb5 distribution page.
It's been a while since I pushed out a release of my collection of utility libraries and test suite programs, so I've accumulated quite a lot of chanages. Here's a summary; for more, see the NEWS file.
RRA_SET_LIBDIR
macro, previously used by PAM modules to
guess the install path.RRA_SET_LDFLAGS
to always use the multilib directory if it
exists, required for OpenSSL 3.0 support.RRA_LIB_PYTHON
to use sysconfig by preference.SUN_LEN
on macOS X Big Sur.pam_end
argments to the PAM testing
framework.k_haspag
replacement if
getgroups
fails.t/docs/changes.t
Perl module test for the format of
Changes files.You can get the latest version from the rra-c-util distribution page.
< September 2021 | Russ Allbery > Eagle's Path | November 2021 > |