rra-c-util 4.4

Lots of changes in this release, since it incorporates a bunch of portability fixes to remctl by Jeffrey Hutzelman and significant improvements to the PAM utility library and test framework that will be in the next release of pam-krb5.

The PAM utility library now does not append the PAM error if the provided PAM status is PAM_SUCCESS, avoiding meaningless error messages.

The PAM test library now supports regular expression matching of output and prompt lines. Support for the %* wildcard has been removed, since regular expressions provide the same functionality in an improved way. As part of this change, the structure of the output returned by the fakepam pam_output function has changed, so callers that look directly at that will need code changes.

The PAM test framework no longer copies the provided password to PAM_AUTHTOK but instead provides separate configuration for setting PAM_AUTHTOK and PAM_OLDAUTHTOK. This allows testing of different behavior for prompting and stored passwords. There are also numerous other, more minor improvements to the testing framework.

The Autoconf macros RRA_LIB_GSSAPI and RRA_LIB_KRB5 now pass --deps to krb5-config if it's supported so that they link with all libraries by default. This fixes some problems in some build situations. Pass --enable-reduced-depends to configure to only link with libraries that are used directly. RRA_LIB_GSSAPI also now falls back to manual probing if gssapi isn't supported, rather than assuming GSS-API libraries are in the default set.

There are also portability and cleanup improvements to the Kerberos and remctl TAP add-ons, and the same changes here as in C TAP Harness for suppressing warnings about __attribute__ handling with some compilers.

Finally, several portability bugs in the network test suite were fixed.

You can get the latest release from the rra-c-util distribution page.