%define bootstrap 0 %{?_without_bootstrap: %global bootstrap 0} %{?_with_bootstrap: %global bootstrap 1} %define major 3 %define libname %mklibname %name %major # enable checking after compile %define enable_check 0 %{?_with_check: %global %enable_check 1} Summary: The Kerberos network authentication system Name: krb5 Version: 1.15.1 Release: %mkrel 2 License: MIT Group: System/Libraries URL: http://web.mit.edu/kerberos/www/ Source0: http://web.mit.edu/kerberos/dist/krb5/1.15/%{name}-%{version}.tar.gz Source1: http://web.mit.edu/kerberos/dist/krb5/1.15/%{name}-%{version}.tar.gz.asc Source2: kprop.service Source3: kadmin.service Source4: krb5kdc.service Source5: kadmin.sysconfig Source6: krb5kdc.sysconfig Source7: kadmin.logrotate Source8: krb5kdc.logrotate Source9: krb5.conf Source10: kdc.conf Source11: kadm5.acl Source12: krb5kdc.tmpfile Source25: krb5-1.10-manpaths.txt Source29: ksu.pamd # stolen from fedora Patch1: krb5-1.12.1-pam.patch Patch2: krb5-1.15-beta1-selinux-label.patch Patch3: krb5-1.12-ksu-path.patch Patch4: krb5-1.12-ktany.patch Patch5: krb5-1.15-beta1-buildconf.patch Patch6: krb5-1.3.1-dns.patch Patch7: krb5-1.12-api.patch Patch8: krb5-1.13-dirsrv-accountlock.patch Patch9: krb5-1.9-debuginfo.patch Patch10: krb5-1.11-run_user_0.patch Patch11: krb5-1.11-kpasswdtest.patch Patch12: Build-with-Werror-implicit-int-where-supported.patch Patch15: Use-fallback-realm-for-GSSAPI-ccache-selection.patch Patch16: Use-GSSAPI-fallback-skiptest.patch Patch17: Improve-PKINIT-UPN-SAN-matching.patch #Patch18: Add-test-cert-generation-to-make-certs.sh.patch Patch19: Add-PKINIT-UPN-tests-to-t_pkinit.py.patch Patch20: Deindent-crypto_retrieve_X509_sans.patch Patch21: Add-certauth-pluggable-interface.patch BuildRequires: flex BuildRequires: bison BuildRequires: chrpath BuildRequires: termcap-devel BuildRequires: e2fsprogs-devel BuildRequires: pam-devel BuildRequires: verto-devel BuildRequires: python-sphinx BuildRequires: texlive BuildRequires: texlive-dist BuildRequires: openssl-devel BuildRequires: yasm %if %enable_check BuildRequires: dejagnu %endif BuildRequires: multiarch-utils >= 1.0.3 %if !%bootstrap BuildRequires: openldap-devel %endif %description Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of cleartext passwords. %package -n %{libname}-devel Summary: Development files needed for compiling Kerberos 5 programs Group: Development/Other Requires: %{libname} = %{version} Provides: krb-devel = %{version}-%{release} Provides: krb5-devel = %{version}-%{release} Provides: libkrb-devel %description -n %{libname}-devel Kerberos is a network authentication system. The krb5-devel package contains the header files and libraries needed for compiling Kerberos 5 programs. If you want to develop Kerberos-aware programs, you'll need to install this package. %package -n %{libname} Summary: The shared libraries used by Kerberos 5 Group: System/Libraries Provides: krb5-libs = %{version}-%{release} # we need the conf file, and better make sure it's a recent version # for example, previous MIT kerberos versions didn't have ldap support, # and this is specified in the conf file Requires: %{name} >= %{version} %description -n %{libname} Kerberos is a network authentication system. The krb5-libs package contains the shared libraries needed by Kerberos 5. If you're using Kerberos, you'll need to install this package. %package server Group: System/Servers Summary: The server programs for Kerberos 5 Requires: %{libname} = %{version}-%{release} Requires(post): rpm-helper Requires(preun):rpm-helper Requires: libverto-module-base %description server Kerberos is a network authentication system. The krb5-server package contains the programs that must be installed on a Kerberos 5 server. If you're installing a Kerberos 5 server, you need to install this package (in other words, most people should NOT install this package). %package server-ldap Group: System/Servers Summary: The LDAP storage plugin for the Kerberos 5 KDC Requires: %{name}-server = %{version}-%{release} %description server-ldap Kerberos is a network authentication system. The krb5-server package contains the programs that must be installed on a Kerberos 5 key distribution center (KDC). If you are installing a Kerberos 5 KDC, and you wish to use a directory server to store the data for your realm, you need to install this package. %package workstation Summary: Kerberos 5 programs for use on workstations Group: System/Base Requires: %{libname} = %{version}-%{release} Requires(post): rpm-helper Requires(preun):rpm-helper Provides: kerberos-workstation %description workstation Kerberos is a network authentication system. The krb5-workstation package contains the basic Kerberos programs (kinit, klist, kdestroy, kpasswd). If your network uses Kerberos, this package should be installed on every workstation. %package pkinit-openssl Summary: The PKINIT module for Kerberos 5 Group: System/Libraries Requires: %{name}-libs = %{version}-%{release} %description pkinit-openssl Kerberos is a network authentication system. The krb5-pkinit-openssl package contains the PKINIT plugin, which uses OpenSSL to allow clients to obtain initial credentials from a KDC using a private key and a certificate. %prep %setup -q %autopatch -p1 # Take the execute bit off of documentation. chmod -x doc/ccapi/*.html sed -i s,^attributetype:,attributetypes:,g \ src/plugins/kdb/ldap/libkdb_ldap/kerberos.ldif pushd src autoreconf %build %serverbuild pushd src # Work out the CFLAGS and CPPFLAGS which we intend to use. INCLUDES=-I%{_includedir}/et CFLAGS="`echo $RPM_OPT_FLAGS $DEFINES $INCLUDES -fPIC`" CPPFLAGS="`echo $DEFINES $INCLUDES`" %configure2_5x \ CC="%{__cc}" \ CFLAGS="$CFLAGS" \ CPPFLAGS="$CPPFLAGS" \ --enable-shared \ --localstatedir=%{_localstatedir}/lib \ --disable-rpath \ --disable-static \ --without-tcl \ --with-system-et \ --with-system-ss \ --with-system-verto \ --enable-dns-for-realm \ %if !%bootstrap --with-ldap \ %endif --with-dirsrv-account-locking \ --enable-pkinit \ --with-pkinit-crypto-impl=openssl \ --with-tls-impl=openssl \ --with-pam \ --without-selinux \ --with-prng-alg=os # parallel build causes troubles on build host make popd # Build the docs. make -C src/doc paths.py version.py cp src/doc/paths.py doc/ mkdir -p build-man build-html build-pdf sphinx-build -a -b man -t pathsubs doc build-man sphinx-build -a -b html -t pathsubs doc build-html rm -fr build-html/_sources sphinx-build -a -b latex -t pathsubs doc build-pdf # Build the PDFs if we didn't have pre-built ones. for pdf in admin appdev basic build plugindev user ; do test -s build-pdf/$pdf.pdf || make -C build-pdf done # new krb5-%{version}-pdf tar -cf "krb5-%{version}-pdfs.tar.new" build-pdf/*.pdf %install # Sample KDC config files (bundled kdc.conf and kadm5.acl) install -d -m 755 %{buildroot}%{_localstatedir}/lib/krb5kdc install -m 600 %{SOURCE10} %{buildroot}%{_localstatedir}/lib/krb5kdc/kdc.conf install -m 600 %{SOURCE11} %{buildroot}%{_localstatedir}/lib/krb5kdc/kadm5.acl # Where per-user keytabs live by default. install -d -m 755 %{buildroot}%{_localstatedir}/lib/krb5/user # Default configuration file for everything install -d -m 755 %{buildroot}%{_sysconfdir} install -m 644 %{SOURCE9} %{buildroot}%{_sysconfdir}/krb5.conf # Parent of configuration file for list of loadable GSS mechs ("mechs"). This # location is not relative to sysconfdir, but is hard-coded in g_initialize.c. install -d -m 755 %{buildroot}%{_sysconfdir}/gss # Parent of groups of configuration files for a list of loadable GSS mechs # ("mechs"). This location is not relative to sysconfdir, and is also # hard-coded in g_initialize.c. install -d -m 755 %{buildroot}%{_sysconfdir}/gss/mech.d install -d -m 755 %{buildroot}%{_unitdir} install -m 644 %{SOURCE2} %{buildroot}%{_unitdir}/kprop.service install -m 644 %{SOURCE3} %{buildroot}%{_unitdir}/kadmin.service install -m 644 %{SOURCE4} %{buildroot}%{_unitdir}/krb5kdc.service install -d -m 755 %{buildroot}%{_tmpfilesdir} install -m 644 %{SOURCE12} %{buildroot}/%{_tmpfilesdir}/krb5kdc.conf # sysconfig configuration files install -d -m 755 %{buildroot}%{_sysconfdir}/sysconfig install -m 644 %{SOURCE5} %{buildroot}%{_sysconfdir}/sysconfig/kadmin install -m 644 %{SOURCE6} %{buildroot}%{_sysconfdir}/sysconfig/krb5kdc # logrotate configuration files install -d -m 755 %{buildroot}%{_sysconfdir}/logrotate.d install -m 644 %{SOURCE7} %{buildroot}%{_sysconfdir}/logrotate.d/kadmin install -m 644 %{SOURCE8} %{buildroot}%{_sysconfdir}/logrotate.d/krb5kdc # PAM configuration files install -d -m 755 %{buildroot}%{_sysconfdir}/pam.d install -m 644 %{SOURCE29} %{buildroot}%{_sysconfdir}/pam.d/ksu # Plug-in directories. install -pdm 755 %{buildroot}%{_libdir}/krb5/plugins/preauth install -pdm 755 %{buildroot}%{_libdir}/krb5/plugins/kdb install -pdm 755 %{buildroot}%{_libdir}/krb5/plugins/authdata # The rest of the binaries, headers, libraries, and docs. make -C src \ DESTDIR=%{buildroot} \ EXAMPLEDIR=%{_docdir}/%{libname}-devel/examples\ install # logdir install -d %{buildroot}%{_localstatedir}/log/kerberos # clear the LDFLAGS perl -pi -e "s|^LDFLAGS.*|LDFLAGS=''|g" %{buildroot}%{_bindir}/krb5-config # multiarch policy %multiarch_binaries %{buildroot}%{_bindir}/krb5-config %multiarch_includes %{buildroot}%{_includedir}/gssapi/gssapi.h # (gb) this one could be fixed differently and properly using <stdint.h> %multiarch_includes %{buildroot}%{_includedir}/gssrpc/types.h # multiarch_includes %{buildroot}%{_includedir}/krb5/k5-config.h # multiarch_includes %{buildroot}%{_includedir}/krb5/autoconf.h # multiarch_includes %{buildroot}%{_includedir}/krb5/osconf.h %multiarch_includes %{buildroot}%{_includedir}/krb5.h # Install processed man pages. for section in 1 5 8; do install -m 644 build-man/*.$section %{buildroot}%{_mandir}/man$section/ done %if %bootstrap rm -f %{buildroot}%{_mandir}/man8/kdb5_ldap_util.8* %endif %find_lang mit-krb5 %post server %_post_service krb5kdc %_post_service kadmin %_post_service kprop %preun server %_preun_service krb5kdc %_preun_service kadmin %_preun_service kprop %files -f mit-krb5.lang %doc README %dir %{_sysconfdir}/gss %dir %{_sysconfdir}/gss/mech.d %config(noreplace) %{_sysconfdir}/krb5.conf %dir %{_libdir}/krb5 %dir %{_libdir}/krb5/plugins %{_mandir}/man5/krb5.conf.5* %{_mandir}/man5/.k5login.5* %{_mandir}/man5/.k5identity.5* %{_mandir}/man5/k5login.5* %{_mandir}/man5/k5identity.5* %dir %{_var}/lib/krb5 %dir %{_var}/lib/krb5/user %files workstation %doc src/config-files/services.append %doc build-html/* %doc build-pdf/user.pdf build-pdf/basic.pdf %attr(0755,root,root) %doc src/config-files/convert-config-files %{_bindir}/kdestroy %{_mandir}/man1/kdestroy.1* %{_bindir}/kinit %{_mandir}/man1/kinit.1* %{_bindir}/klist %{_mandir}/man1/klist.1* %{_bindir}/kpasswd %{_mandir}/man1/kpasswd.1* %{_bindir}/kswitch %{_mandir}/man1/kswitch.1* %{_bindir}/kvno %{_mandir}/man1/kvno.1* %{_bindir}/kadmin %{_mandir}/man1/kadmin.1* %{_bindir}/k5srvutil %{_mandir}/man1/k5srvutil.1* %{_bindir}/ktutil %{_mandir}/man1/ktutil.1* %attr(4755,root,root) %{_bindir}/ksu %{_mandir}/man1/ksu.1* %config(noreplace) /etc/pam.d/ksu # Problem-reporting tool %{_sbindir}/krb5-send-pr %files server %doc build-pdf/admin.pdf build-pdf/build.pdf %{_unitdir}/krb5kdc.service %{_unitdir}/kadmin.service %{_unitdir}/kprop.service %{_tmpfilesdir}/krb5kdc.conf %config(noreplace) %{_sysconfdir}/sysconfig/krb5kdc %config(noreplace) %{_sysconfdir}/sysconfig/kadmin %config(noreplace) %{_sysconfdir}/logrotate.d/kadmin %config(noreplace) %{_sysconfdir}/logrotate.d/krb5kdc %dir %{_localstatedir}/log/kerberos %dir %{_localstatedir}/lib/krb5kdc %config(noreplace) %{_localstatedir}/lib/krb5kdc/kdc.conf %config(noreplace) %{_localstatedir}/lib/krb5kdc/kadm5.acl %{_mandir}/man5/kadm5.acl.5* %{_mandir}/man5/kdc.conf.5* %{_sbindir}/kadmin.local %{_mandir}/man8/kadmin.local.8* %{_sbindir}/kadmind %{_mandir}/man8/kadmind.8* %{_sbindir}/kdb5_util %{_mandir}/man8/kdb5_util.8* %if !%bootstrap %{_sbindir}/kdb5_ldap_util %{_mandir}/man8/kdb5_ldap_util.8* %endif %{_sbindir}/kprop %{_mandir}/man8/kprop.8* %{_sbindir}/kpropd %{_mandir}/man8/kpropd.8* %{_sbindir}/kproplog %{_mandir}/man8/kproplog.8* %{_sbindir}/krb5kdc %{_mandir}/man8/krb5kdc.8* %{_sbindir}/sim_server # This is here for people who want to test their server. It was formerly also # included in -devel. %{_bindir}/sclient %{_mandir}/man1/sclient.1* %{_sbindir}/sserver %{_mandir}/man8/sserver.8* %dir %{_libdir}/krb5 %dir %{_libdir}/krb5/plugins %dir %{_libdir}/krb5/plugins/kdb %dir %{_libdir}/krb5/plugins/preauth %dir %{_libdir}/krb5/plugins/authdata %dir %{_libdir}/krb5/plugins/tls %{_libdir}/krb5/plugins/preauth/otp.so %{_libdir}/krb5/plugins/preauth/test.so %{_libdir}/krb5/plugins/tls/k5tls.so %files -n %{libname} %{_libdir}/libgssapi_krb5.so.* %{_libdir}/libgssrpc.so.* %{_libdir}/libk5crypto.so.* %{_libdir}/libkrb5.so.* %{_libdir}/libkrb5support.so.* %{_libdir}/libkadm5clnt_mit.so.* %{_libdir}/libkadm5srv_mit.so.* %{_libdir}/libkdb5.so.* %{_libdir}/libkrad.so.* %dir %{_libdir}/krb5 %dir %{_libdir}/krb5/plugins %dir %{_libdir}/krb5/plugins/* %{_libdir}/krb5/plugins/kdb/db2.so %files -n %{libname}-devel %doc build-pdf/appdev.pdf build-pdf/plugindev.pdf %doc %{_docdir}/%{libname}-devel %multiarch %{multiarch_bindir}/krb5-config %multiarch %{multiarch_includedir}/gssapi/gssapi.h %multiarch %{multiarch_includedir}/gssrpc/types.h %multiarch %{multiarch_includedir}/krb5.h %{_includedir}/*.h %{_includedir}/gssapi %{_includedir}/gssrpc %{_includedir}/kadm5 %{_includedir}/krb5 %{_bindir}/krb5-config %{_libdir}/libgssapi_krb5.so %{_libdir}/libgssrpc.so %{_libdir}/libk5crypto.so %{_libdir}/libkadm5clnt.so %{_libdir}/libkadm5clnt_mit.so %{_libdir}/libkadm5srv.so %{_libdir}/libkadm5srv_mit.so %{_libdir}/libkdb5.so %{_libdir}/libkrb5.so %{_libdir}/libkrb5support.so %{_libdir}/libkrad.so %{_mandir}/man1/krb5-config.1* %{_libdir}/pkgconfig/* # Protocol test clients %{_bindir}/sim_client %{_bindir}/gss-client %{_bindir}/uuclient # Protocol test servers %{_sbindir}/gss-server %{_sbindir}/uuserver %{_mandir}/man5/.k5login.5* %{_mandir}/man5/krb5.conf.5* %files pkinit-openssl %dir %{_libdir}/krb5 %dir %{_libdir}/krb5/plugins %dir %{_libdir}/krb5/plugins/preauth %{_libdir}/krb5/plugins/preauth/pkinit.so %files server-ldap %doc src/plugins/kdb/ldap/libkdb_ldap/kerberos.ldif %doc src/plugins/kdb/ldap/libkdb_ldap/kerberos.schema %dir %{_libdir}/krb5 %dir %{_libdir}/krb5/plugins %dir %{_libdir}/krb5/plugins/kdb %if !%bootstrap %{_libdir}/krb5/plugins/kdb/kldap.so %{_libdir}/libkdb_ldap.so %{_libdir}/libkdb_ldap.so.* %{_sbindir}/kdb5_ldap_util %endif %changelog * Mon Apr 24 2017 guillomovitch <guillomovitch> 1.15.1-2.mga6 + Revision: 1097262 - don't include non-existing directory in default configuration file * Sun Apr 09 2017 luigiwalser <luigiwalser> 1.15.1-1.mga6 + Revision: 1096201 - 1.15.1 - sync patches with fedora (except binary patch) * Mon Feb 13 2017 guillomovitch <guillomovitch> 1.15-1.mga6 + Revision: 1086052 - new version 1.15 switch to kernel keyring credentials for default * Fri Nov 11 2016 luigiwalser <luigiwalser> 1.14.4-1.mga6 + Revision: 1066612 - 1.14.4 - resync patches with fedora * Thu Aug 11 2016 luigiwalser <luigiwalser> 1.14.3-1.mga6 + Revision: 1045555 - 1.14.3 - remove upstreamed patches * Mon Aug 08 2016 luigiwalser <luigiwalser> 1.14.2-3.mga6 + Revision: 1045002 - add patch from fedora to fix CVE-2016-3120 * Tue Jun 28 2016 luigiwalser <luigiwalser> 1.14.2-2.mga6 + Revision: 1038041 - add patch from fedora to fix recv() size calculation in libkrad * Mon May 09 2016 luigiwalser <luigiwalser> 1.14.2-1.mga6 + Revision: 1011438 - 1.14.2 - remove upstream CVE-2016-3119 patch * Wed Mar 23 2016 luigiwalser <luigiwalser> 1.14.1-1.mga6 + Revision: 994631 - 1.14.1 - remove upstream CVE patches - add patch from fedora to fix CVE-2016-3119 * Wed Mar 02 2016 umeabot <umeabot> 1.14-3.mga6 + Revision: 983552 - Rebuild for openssl * Fri Jan 29 2016 luigiwalser <luigiwalser> 1.14-2.mga6 + Revision: 928991 - add patches from fedora to fix CVE-2015-8629, CVE-2015-863[01] and world-readable krb5kdc.log * Tue Nov 24 2015 guillomovitch <guillomovitch> 1.14-1.mga6 + Revision: 905869 - new version * Mon Nov 09 2015 luigiwalser <luigiwalser> 1.12.2-12.mga6 + Revision: 900094 - add patch from fedora to fix CVE-2015-2698 * Tue Nov 03 2015 luigiwalser <luigiwalser> 1.12.2-11.mga6 + Revision: 897564 - add patches from fedora to fix CVE-2015-269[5-7] * Mon Sep 28 2015 blino <blino> 1.12.2-10.mga6 + Revision: 884333 - fix packaging examples in devel package doc * Fri Aug 21 2015 tmb <tmb> 1.12.2-9.mga6 + Revision: 867528 - rebuild for new gcc * Wed May 06 2015 luigiwalser <luigiwalser> 1.12.2-8.mga5 + Revision: 821332 - add patch from fedora to fix CVE-2015-2694 * Fri Mar 20 2015 luigiwalser <luigiwalser> 1.12.2-7.mga5 + Revision: 819032 - add upstream patch to fix CVE-2014-5355 * Wed Feb 04 2015 luigiwalser <luigiwalser> 1.12.2-6.mga5 + Revision: 813452 - add upstream patch to fix CVE-2014-5352 and CVE-2014-942[1-3] * Tue Dec 16 2014 luigiwalser <luigiwalser> 1.12.2-5.mga5 + Revision: 803595 - add upstream patches to fix CVE-2014-5353 and CVE-2014-5354 * Mon Nov 17 2014 luigiwalser <luigiwalser> 1.12.2-4.mga5 + Revision: 797643 - add patch from fedora to fix CVE-2014-5351 * Wed Oct 15 2014 umeabot <umeabot> 1.12.2-3.mga5 + Revision: 747025 - Second Mageia 5 Mass Rebuild * Tue Sep 16 2014 umeabot <umeabot> 1.12.2-2.mga5 + Revision: 681190 - Mageia 5 Mass Rebuild * Sat Aug 16 2014 luigiwalser <luigiwalser> 1.12.2-1.mga5 + Revision: 664028 - 1.12.2 - remove upstreamed patch 56 - remove upstreamed CVE patches * Fri Aug 08 2014 luigiwalser <luigiwalser> 1.12.1-2.mga5 + Revision: 661172 - add patches from fedora to fix CVE-2014-434[1-5] * Tue Feb 04 2014 guillomovitch <guillomovitch> 1.12.1-1.mga5 + Revision: 580534 - new version 1.12.1 * Fri Nov 15 2013 guillomovitch <guillomovitch> 1.11.4-1.mga4 + Revision: 551376 - new version 1.11.4 * Mon Oct 21 2013 umeabot <umeabot> 1.11.3-3.mga4 + Revision: 537829 - Mageia 4 Mass Rebuild * Fri Sep 27 2013 nanardon <nanardon> 1.11.3-2.mga4 + Revision: 487852 - buildrequires - rebuild (missing in x86_64) * Wed Jun 05 2013 guillomovitch <guillomovitch> 1.11.3-1.mga4 + Revision: 437706 - new version * Wed May 29 2013 guillomovitch <guillomovitch> 1.11.2-2.mga4 + Revision: 429859 - add explicit dependency on libverto-module-base for server subpackage (#10307) * Fri May 24 2013 guillomovitch <guillomovitch> 1.11.2-1.mga4 + Revision: 426099 - new version * Tue May 14 2013 oden <oden> 1.11.1-2.mga4 + Revision: 413117 - P106: security fix for CVE-2002-2443 (upstream) * Mon Feb 25 2013 guillomovitch <guillomovitch> 1.11.1-1.mga3 + Revision: 400305 - new version * Sat Jan 12 2013 umeabot <umeabot> 1.11-3.mga3 + Revision: 356461 - Mass Rebuild - https://wiki.mageia.org/en/Feature:Mageia3MassRebuild * Wed Jan 02 2013 guillomovitch <guillomovitch> 1.11-2.mga3 + Revision: 337655 - ldap support is back * Wed Jan 02 2013 guillomovitch <guillomovitch> 1.11-1.mga3 + Revision: 337601 - disable ldap support temporarily, in order to be able to install verto-devel - new version * Tue Oct 16 2012 guillomovitch <guillomovitch> 1.10.3-2.mga3 + Revision: 307137 - drop portreserve support, because of its marginal usefulness * Fri Sep 07 2012 luigiwalser <luigiwalser> 1.10.3-1.mga3 + Revision: 289609 - 1.10.3 * Wed Aug 01 2012 luigiwalser <luigiwalser> 1.10.2-3.mga3 + Revision: 277685 - add upstream patch to fix CVE-2012-1014 and CVE-2012-1015 * Thu Jul 05 2012 guillomovitch <guillomovitch> 1.10.2-2.mga3 + Revision: 267906 - use /var/lib/krb5kdc as database directory - force usage of builtin libverto, to fix chicken-and-egg issue + luigiwalser <luigiwalser> - fix paths in kadmin and kprop service files * Wed Jun 27 2012 guillomovitch <guillomovitch> 1.10.2-1.mga3 + Revision: 264466 - new version - sync patch set with fedora - add systemd support - drop sysinit support * Fri Jun 15 2012 luigiwalser <luigiwalser> 1.9.2-3.mga3 + Revision: 260854 - add upstream patch to fix CVE-2012-1013 * Mon Jan 02 2012 dmorgan <dmorgan> 1.9.2-2.mga2 + Revision: 189535 - Add fix for CVE-2011-1530 * Thu Nov 03 2011 guillomovitch <guillomovitch> 1.9.2-1.mga2 + Revision: 162139 - new version - new version - drop old obsoletes tags from spec file * Tue May 03 2011 saispo <saispo> 1.8.3-5.mga1 + Revision: 94391 - Sync Advisories for 2010 and 2011 + rtp <rtp> - allow to break openldap <-> krb circular build require * Sun Jan 09 2011 blino <blino> 1.8.3-4.mga1 + Revision: 3724 - remove old conflicts and ldconfig scriptlets - imported package krb5