Module Name:	pkgsrc
Committed By:	joerg
Date:		Tue Mar  7 01:22:16 UTC 2006

Modified Files:
	pkgsrc/security/pam-mysql: Makefile PLIST distinfo
Removed Files:
	pkgsrc/security/pam-mysql/patches: patch-aa

Log Message:
Update pam-mysql to 0.7RC1. This fixes a number of security issues.

From NEWS:
Version 0.7-RC1   2006/1/10  <moriyoshi@users.sourceforge.net>

* Add a option "disconnect_every_op" option that forces pam_mysql to
  disconnect from the database every operation (PR #1325395). -moriyoshi
* Use geteuid() instead of getuid() to check if the current user is authorized
  to change the password (PR #1338667). -moriyoshi
* Allow root (uid=0) to change the passwords of other users without their old
  password. -moriyoshi

Version 0.7-pre3  2005/9/29  <moriyoshi@users.sourceforge.net>

* Changed handling of the "where" option to not escape meta characters
  (PR #1261484). -moriyoshi
* Overhauled the SQL logging facility (PR #1256243). -moriyoshi
* Added logrhostcolumn (log.rhost_column) option that enables you to log the
  value of the "rhost" item specified by the application. -moriyoshi
* Fixed possible security flaw (though not considered to be severe). -moriyoshi
* Fixed memory leaks spotted when "config_file" option is used. -moriyoshi
* Fixed try_first_pass behaviour. -moriyoshi
* Changed option parsing behaviour so "=" following each option name is not
  needed. -moriyoshi

Version 0.7-pre2  2005/9/18  <moriyoshi@users.sourceforge.net>

* Changed column name handling to not escape meta characters. Now you can
  specify an expression to every XXXcolumn variable like "CONCAT(a, b, c)".
  -moriyoshi
* Supported SHA1 hash (PR #1117036). -moriyoshi, alexeen
* Supported use_first_pass and try_first_pass options. -moriyoshi

Version 0.7-pre1  2005/6/13  <moriyoshi@users.sourceforge.net>

* Support for NSS-mysql style configuration file which is inspired
  by the Florian's work. -moriyoshi

Version 0.6.2  2005/9/29  <moriyoshi@users.sourceforge.net>

* Overhauled the SQL logging facility (PR #1256243). -moriyoshi
* Fixed possible security flaw (though not considered to be severe). -moriyoshi

Version 0.6.1  2005/9/18  <moriyoshi@users.sourceforge.net>

* Added use_323_passwd option that allows you to use an encryption function
  used in the old MySQL versions (3.23.x). -moriyoshi, Daniel Renaud
* Fixed account management code that wouldn't work at all :-p -moriyoshi
* Included pam_mysql.spec to the tarball by default. This enables you to
  make a RPM with the following oneliner: (rpmbuild -tb pam_mysql.tar.gz).
  -moriyoshi
* Fixed compile failure that occurs with the old mysql_config (< 4.0.16).
  -moriyoshi
* Fixed compile failure on Solaris when --with-openssl is specified to the
  configure script.

Version 0.6  2005/6/13  <moriyoshi@users.sourceforge.net>

* Adopted autoconf / automake for build system. -moriyoshi
* Portable MD5 support by using OpenSSL / Cyrus-SASL. -moriyoshi
* MySQL library detection. -moriyoshi
* Added RPM spec file. -moriyoshi
* Tidied up the entire code for security and maintainability. -moriyoshi
* Modified log output to be more verbose. -moriyoshi
* Changed log facility type to LOG_AUTHPRIV as per the recommendation in
  the PAM documentation. -moriyoshi
* Added support for unix socket and non-default ports. -moriyoshi
* Added account management and authentication token alteration code. -moriyoshi
* Remove default values for string parameters for the sake of performance.
  -moriyoshi
* Enhanced SQL logging function to log session state as well. -moriyoshi
* Solaris support. -moriyoshi


To generate a diff of this commit:
cvs rdiff -r1.5 -r1.6 pkgsrc/security/pam-mysql/Makefile
cvs rdiff -r1.1.1.1 -r1.2 pkgsrc/security/pam-mysql/PLIST \
    pkgsrc/security/pam-mysql/distinfo
cvs rdiff -r1.1.1.1 -r0 pkgsrc/security/pam-mysql/patches/patch-aa

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.