[svn-upgrade] Integrating new upstream version, shadow (4.0.11)

Makefile.in

@@ -38,8 +38,8 @@ host_triplet = @host@
 DIST_COMMON = README $(am__configure_deps) $(srcdir)/Makefile.am \
 	$(srcdir)/Makefile.in $(srcdir)/config.h.in \
 	$(srcdir)/shadow.spec.in $(top_srcdir)/configure ABOUT-NLS \
-	ChangeLog NEWS TODO acconfig.h config.guess config.rpath \
-	config.sub depcomp install-sh ltmain.sh missing mkinstalldirs
+	ChangeLog NEWS TODO config.guess config.rpath config.sub \
+	depcomp install-sh ltmain.sh missing mkinstalldirs
 subdir = .
 ACLOCAL_M4 = $(top_srcdir)/aclocal.m4
 am__aclocal_m4_deps = $(top_srcdir)/configure.in
@@ -113,10 +113,12 @@ LIBCRACK = @LIBCRACK@
 LIBCRYPT = @LIBCRYPT@
 LIBICONV = @LIBICONV@
 LIBINTL = @LIBINTL@
+LIBMD = @LIBMD@
 LIBOBJS = @LIBOBJS@
 LIBPAM = @LIBPAM@
 LIBS = @LIBS@
 LIBSELINUX = @LIBSELINUX@
+LIBSKEY = @LIBSKEY@
 LIBTOOL = @LIBTOOL@
 LN_S = @LN_S@
 LTLIBICONV = @LTLIBICONV@
@@ -242,7 +244,7 @@ config.h: stamp-h1
 stamp-h1: $(srcdir)/config.h.in $(top_builddir)/config.status
 	@rm -f stamp-h1
 	cd $(top_builddir) && $(SHELL) ./config.status config.h
-$(srcdir)/config.h.in: @MAINTAINER_MODE_TRUE@ $(am__configure_deps) $(top_srcdir)/acconfig.h
+$(srcdir)/config.h.in: @MAINTAINER_MODE_TRUE@ $(am__configure_deps) 
 	cd $(top_srcdir) && $(AUTOHEADER)
 	rm -f stamp-h1
 	touch $@

NEWS

@@ -1,4 +1,51 @@
-$Id: NEWS,v 1.178 2005/06/28 14:28:19 kloczek Exp $
+$Id: NEWS,v 1.211 2005/07/18 09:53:57 kloczek Exp $
+
+shadow-4.0.10 -> shadow-4.0.11						18-07-2005
+
+*** general:
+- su: ignore SIGINT while authenticating. A ^C could defeat the waiting period and
+  permit brute-force attacks. Also ignore SIGQUIT.
+  Fixed: http://bugs.debian.org/52372 and http://bugs.debian.org/288827
+- useradd: rewrited for use getopt_long(),
+- newgrp: add fix for handle splitted NIS groups: extends the functionality that,
+  if the requested group is given, all groups of the same GID are tested for
+  membership of the requesting user.
+  (fix by Christian Mudra <C.Mudra@science-computing.de>)
+- fix nscd_flush_cache(): for some reason doing the INVALIDATE call with two
+  write()'s fails. Do one writev() call instead.
+  http://bugs.gentoo.org/show_bug.cgi?id=80413
+  (submited by Martin Schlemmer <azarah@gentoo.org>)
+- merge nscd-socket-path patch from Fedora: newer glibc's have a different nscd socket
+  location (/var/run/nscd/socket instead /var/run/.nscd_socket),
+- S/Key support is back,
+- usermod: added -a option. This flag can only be used in conjunction with the -G
+  option. It cause usermod to append user to the current supplementary group list.
+  (patch by Peter Vrabec <pvrabec@redhat.com>) 
+- chage: added missing \n in error messages,
+- useradd, groupadd: change -O option to -K and document it in man page,
+- su, sulogin, login: fixed erroneous warning messages when used with PAM about some
+  login.defs variables (fix by DJ Lucas <dj@linuxfromscratch.org>),
+- autoconf:
+-- stop with error message if crypt() not found,
+-- remove --with{,out}-libcrypt switch,
+-- move all autoheader templates from acconfig.h to configure.in,
+- login: setup limits and umask (using login.defs ULIMITS and UMASK variables) only when
+  PAM support is disabled (it is task for pam_limits and pam_umask modules),
+- sulogin, login: use SYSLOG macro instead syslog() which saves the locale, sets the
+  locale to C, sends the message and restores the locale
+  (fix by Nicolas François <nicolas.francois@centraliens.net>).
+- updated translations: cs, da, de, es, fi, pl, pt, ro, ru, sk.
+*** documentation:
+- pwck(8): document -q option (based on Debian patch for fix http://bugs.debian.org/309408)
+- pwck(8): rewrited OPTIONS section and better SYNOPSIS,
+- lastlog(8): document that lastlog is a sparse file, and don't need to be rotated
+  http://bugs.debian.org/219321
+- login(8): better explain the respective roles of login, init and getty with regards
+  to the utmp file (based on 441_manpages-shadow.5 Debian patch),
+- shadowconfig(8): removed (will be maintained in Debian shadow pkg repository),
+- groupadd(8): document -o option,
+- in SEE ALLSO section in groupadd(8), groupdel(8), groupmod(8), userdel(8), usermod(8)
+  added refer to gpasswd(8) (suggested by Mike Frysinger <vapier@gentoo.org>).
 
 shadow-4.0.9 -> shadow-4.0.10						28-06-2005
 
@@ -30,7 +77,7 @@ shadow-4.0.9 -> shadow-4.0.10						28-06-2005
   when it should have used pam_user) http://bugs.debian.org/47819
 - remove using SHADOWPWD #define so now shadow is allways builded with shadow
   passwowd support,
-- chage: rewrite for use getopt_long(),
+- chage: rewrited for use getopt_long(),
 - updated translations: ca, cs, da, fi, pl, ru, zh_TW.
 *** documentation:
 - most of the man pages now are generated from XML files so in case submiting any
@@ -104,7 +151,7 @@ shadow-4.0.7 -> shadow-4.0.8						26-04-2005
 - newgrp(1): fix #251926, #166173, #113191 Debian bugs: explain why editing /etc/group   
   (without gshadow) doesn't permit to use newgrp,
 - newgrp(1): newgrp uses /bin/sh (not bash),
-- faillog(8): updated after rewrite faillog command for use getopt_long(),
+- faillog(8): updated after rewrited faillog command for use getopt_long(),
 - login(1): removed fragment about abilities pass enviroment variables in login prompt,
 - gshadow(5): new file (by Nicolas Nicolas François <nicolas.francois@centraliens.net>),
 - usermod(8): fixed #302388 Debian bug: added separated -o option description,

config.h.in

@@ -1,84 +1,12 @@
 /* config.h.in.  Generated from configure.in by autoheader.  */
-/* $Id: acconfig.h,v 1.23 2005/06/16 18:39:30 kloczek Exp $ */
-
-
-
-/* Path for faillog file.  */
-#undef FAILLOG_FILE
-
-/* Defined if you have libcrack.  */
-#undef HAVE_LIBCRACK
-
-/* Defined if you have the ts&szs cracklib.  */
-#undef HAVE_LIBCRACK_HIST
-
-/* Defined if it includes *Pw functions.  */
-#undef HAVE_LIBCRACK_PW
-
-/* Defined if you have libcrypt.  */
-#undef HAVE_LIBCRYPT
-
-/* Define if struct lastlog has ll_host */
-#undef HAVE_LL_HOST
-
-/* Working shadow group support in libc?  */
-#undef HAVE_SHADOWGRP
-
-/* Path for lastlog file.  */
-#undef LASTLOG_FILE
-
-/* Define to support /etc/login.access login access control.  */
-#undef LOGIN_ACCESS
-
-/* Location of system mail spool directory.  */
-#undef MAIL_SPOOL_DIR
-
-/* Name of user's mail spool file if stored in user's home directory.  */
-#undef MAIL_SPOOL_FILE
-
-/* Path to passwd program.  */
-#undef PASSWD_PROGRAM
-
-/* Define if login should support the -r flag for rlogind.  */
-#undef RLOGIN
-
-/* Define to the ruserok() "success" return value (0 or 1).  */
-#undef RUSEROK
-
-/* Define to support the shadow group file.  */
-#undef SHADOWGRP
-
-/* Define to support S/Key logins.  */
-#undef SKEY
-
-/* Define to support /etc/suauth su access control.  */
-#undef SU_ACCESS
-
-/* Define to use syslog().  */
-#undef USE_SYSLOG
-
-/* Define to support USG (Unix Systems Group?) behavior. */
-#undef USG
-
-/* Define if you have ut_host in struct utmp.  */
-#undef UT_HOST
-
-/* Path for utmp file.  */
-#undef _UTMP_FILE
-
-/* Path for wtmp file.  */
-#undef _WTMP_FILE
-
-/* Define to libshadow_getpass to use our own version of getpass().  */
-#undef getpass
-
-/* Define to ut_name if struct utmp has ut_name (not ut_user).  */
-#undef ut_user
 
 /* Define to 1 if translation of program messages to the user's native
    language is requested. */
 #undef ENABLE_NLS
 
+/* Path for faillog file. */
+#undef FAILLOG_FILE
+
 /* Define to the type of elements in the array set by `getgroups'. Usually
    this is either `int' or `gid_t'. */
 #undef GETGROUPS_T
@@ -162,9 +90,21 @@
 /* Define to 1 if you have the `lckpwdf' function. */
 #undef HAVE_LCKPWDF
 
+/* Defined if you have libcrack. */
+#undef HAVE_LIBCRACK
+
+/* Defined if you have the ts&szs cracklib. */
+#undef HAVE_LIBCRACK_HIST
+
+/* Defined if it includes *Pw functions. */
+#undef HAVE_LIBCRACK_PW
+
 /* Define to 1 if you have the <limits.h> header file. */
 #undef HAVE_LIMITS_H
 
+/* Define if struct lastlog has ll_host */
+#undef HAVE_LL_HOST
+
 /* Define to 1 if you have the <locale.h> header file. */
 #undef HAVE_LOCALE_H
 
@@ -225,6 +165,9 @@
 /* Define to 1 if you have the <sgtty.h> header file. */
 #undef HAVE_SGTTY_H
 
+/* Have working shadow group support in libc */
+#undef HAVE_SHADOWGRP
+
 /* Define to 1 if you have the <shadow.h> header file. */
 #undef HAVE_SHADOW_H
 
@@ -326,6 +269,15 @@
 /* Define to 1 if you have the <utmp.h> header file. */
 #undef HAVE_UTMP_H
 
+/* Path for lastlog file. */
+#undef LASTLOG_FILE
+
+/* Location of system mail spool directory. */
+#undef MAIL_SPOOL_DIR
+
+/* Name of user's mail spool file if stored in user's home directory. */
+#undef MAIL_SPOOL_FILE
+
 /* Name of package */
 #undef PACKAGE
 
@@ -344,21 +296,39 @@
 /* Define to the version of this package. */
 #undef PACKAGE_VERSION
 
+/* Path to passwd program. */
+#undef PASSWD_PROGRAM
+
 /* Define to 1 if the C compiler supports function prototypes. */
 #undef PROTOTYPES
 
 /* Define as the return type of signal handlers (`int' or `void'). */
 #undef RETSIGTYPE
 
+/* Define if login should support the -r flag for rlogind. */
+#undef RLOGIN
+
+/* Define to the ruserok() "success" return value (0 or 1). */
+#undef RUSEROK
+
 /* Define to 1 if the `setpgrp' function takes no argument. */
 #undef SETPGRP_VOID
 
+/* Define to support the shadow group file. */
+#undef SHADOWGRP
+
+/* Define to support S/Key logins. */
+#undef SKEY
+
 /* Define to 1 if the `S_IS*' macros in <sys/stat.h> do not work properly. */
 #undef STAT_MACROS_BROKEN
 
 /* Define to 1 if you have the ANSI C header files. */
 #undef STDC_HEADERS
 
+/* Define to support /etc/suauth su access control. */
+#undef SU_ACCESS
+
 /* Define to 1 if you can safely include both <sys/time.h> and <time.h>. */
 #undef TIME_WITH_SYS_TIME
 
@@ -368,6 +338,12 @@
 /* Define to support Pluggable Authentication Modules */
 #undef USE_PAM
 
+/* Define to use syslog(). */
+#undef USE_SYSLOG
+
+/* Define if you have ut_host in struct utmp. */
+#undef UT_HOST
+
 /* Version number of package */
 #undef VERSION
 
@@ -385,12 +361,21 @@
 /* Define for large files, on AIX-style hosts. */
 #undef _LARGE_FILES
 
+/* Path for utmp file. */
+#undef _UTMP_FILE
+
+/* Path for wtmp file. */
+#undef _WTMP_FILE
+
 /* Define like PROTOTYPES; this can be used by system headers. */
 #undef __PROTOTYPES
 
 /* Define to empty if `const' does not conform to ANSI C. */
 #undef const
 
+/* Define to libshadow_getpass to use our own version of getpass(). */
+#undef getpass
+
 /* Define to `int' if <sys/types.h> doesn't define. */
 #undef gid_t
 
@@ -405,3 +390,6 @@
 
 /* Define to `int' if <sys/types.h> doesn't define. */
 #undef uid_t
+
+/* Define to ut_name if struct utmp has ut_name (not ut_user). */
+#undef ut_user