CVS commit: pkgsrc/security/py-pyspnego

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Thu Oct  8 16:45:00 UTC 2026

Modified Files:
        pkgsrc/security/py-pyspnego: Makefile distinfo

Log Message:
py-pyspnego: updated to 0.12.4

0.12.4 - 2026-10-06

* Fix SSPI acceptor with explicit `Password` or `KerberosKeytab` credentials failing with `SEC_E_LOGON_DENIED` when the username is in the UPN form `user@REALM`
  * The `pszPrincipal` value is no longer passed to `AcquireCredentialsHandle`, it was set to the SPN for acceptors but does not control the acceptor identity
* Fix `spnego.server(credentials=..., protocol="negotiate", options=NegotiateOptions.use_negotiate)` to pass the credentials to the Kerberos and NTLM acceptor contexts it creates
  * On Windows the Kerberos acceptor had no credential to accept with and was dropped from the mech list, leaving only NTLM
* Fix SPNEGO acceptor to echo the Kerberos OID the initiator offered as the `supportedMech`
  * Windows initiators list the MS Kerberos OID `1.2.840.48018.1.2.2` ahead of the standard OID and reject a `NegTokenResp` that does not echo it
  * The MS Kerberos OID and the pre RFC draft OID `1.3.5.1.5.2` are treated as aliases of Kerberos when matching the mech list and `supportedMech`, matching MIT krb5
  * The acceptor no longer requests a `mechListMIC` when the initiator listed a Kerberos alias first as the optimistic mech was the one selected
* Use `socket.gethostname()` rather than `socket.getfqdn()` for the `DnsComputerName` in the NTLM acceptor `CHALLENGE` message
  * `socket.getfqdn()` does a DNS lookup which can block for a few seconds when DNS is not set up for the host
* Fix the SSPI `negotiated_protocol` and `session_key` properties failing with a `TypeError` before the first step
  * `negotiated_protocol` returns the protocol requested, or `None` for `negotiate`, like the GSSAPI and Python Negotiate proxies
  * `session_key` raises `NoContextError` like the GSSAPI proxy


To generate a diff of this commit:
cvs rdiff -u -r1.15 -r1.16 pkgsrc/security/py-pyspnego/Makefile
cvs rdiff -u -r1.10 -r1.11 pkgsrc/security/py-pyspnego/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/py-pyspnego/Makefile
diff -u pkgsrc/security/py-pyspnego/Makefile:1.15 pkgsrc/security/py-pyspnego/Makefile:1.16
--- pkgsrc/security/py-pyspnego/Makefile:1.15   Sat Oct  3 09:04:43 2026
+++ pkgsrc/security/py-pyspnego/Makefile        Thu Oct  8 16:45:00 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.15 2026/10/03 09:04:43 adam Exp $
+# $NetBSD: Makefile,v 1.16 2026/10/08 16:45:00 adam Exp $
 
-DISTNAME=      pyspnego-0.12.3
+DISTNAME=      pyspnego-0.12.4
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    security python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=p/pyspnego/}

Index: pkgsrc/security/py-pyspnego/distinfo
diff -u pkgsrc/security/py-pyspnego/distinfo:1.10 pkgsrc/security/py-pyspnego/distinfo:1.11
--- pkgsrc/security/py-pyspnego/distinfo:1.10   Sat Oct  3 09:04:43 2026
+++ pkgsrc/security/py-pyspnego/distinfo        Thu Oct  8 16:45:00 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.10 2026/10/03 09:04:43 adam Exp $
+$NetBSD: distinfo,v 1.11 2026/10/08 16:45:00 adam Exp $
 
-BLAKE2s (pyspnego-0.12.3.tar.gz) = bd1f042e680d0b28caedb86af89e17b57fb2ee8409bcde43697b9ea09b001f03
-SHA512 (pyspnego-0.12.3.tar.gz) = 9752c08c82aadb5a6990c2eab0a89a6ff3182d10696946db157f83c60c128a687c0507b8c57c24d2fe3d3ee1bac8833548f3e963acb6dd383dc675671689167d
-Size (pyspnego-0.12.3.tar.gz) = 226528 bytes
+BLAKE2s (pyspnego-0.12.4.tar.gz) = d9cc79be99f5d51dd4e2dcf5d23d1ab89b6149fa7ba93b3de41e126b87a16591
+SHA512 (pyspnego-0.12.4.tar.gz) = ae24f43d0d2936c425158c2c5d807785bbe7dbc2b2c50477ffd413fcb851893ffc62412c684ce267551c1b87c6055929baec3ff74bbda37f7d9e004b4ceb82ba
+Size (pyspnego-0.12.4.tar.gz) = 235376 bytes