libapache2-mod-authnz-external (3.2.4-2.1) debian-dir only changes

Summary

 debian/README.debian                          |   17 +++++
 debian/authnz_external.load                   |    1 
 debian/changelog                              |   21 ++++++
 debian/compat                                 |    1 
 debian/control                                |   23 +++++++
 debian/copyright                              |   58 ++++++++++++++++++
 debian/libapache2-mod-authnz-external.dirs    |    2 
 debian/libapache2-mod-authnz-external.docs    |    2 
 debian/libapache2-mod-authnz-external.install |    2 
 debian/rules                                  |   81 ++++++++++++++++++++++++++
 debian/watch                                  |   24 +++++++
 11 files changed, 232 insertions(+)

    
download this patch

Patch contents

--- libapache2-mod-authnz-external-3.2.4.orig/debian/watch
+++ libapache2-mod-authnz-external-3.2.4/debian/watch
@@ -0,0 +1,24 @@
+# watch control file for uscan
+# you can run the "uscan" command
+# to check for upstream updates and more.
+# See uscan(1) for format
+
+# Compulsory line, this is a version 3 file
+version=3
+
+# Uncomment to examine a Webpage
+# <Webpage URL> <string match>
+#http://www.example.com/downloads.php #PACKAGE#-(.*)\.tar\.gz
+http://code.google.com/p/mod-auth-external/downloads/list http://mod-auth-external.googlecode.com/files/mod_authnz_external-(.*)\.tar\.gz
+
+# Uncomment to examine a Webserver directory
+#http://www.example.com/pub/#PACKAGE#-(.*)\.tar\.gz
+
+# Uncommment to examine a FTP server
+#ftp://ftp.example.com/pub/#PACKAGE#-(.*)\.tar\.gz debian uupdate
+
+# Uncomment to find new files on sourceforge, for devscripts >= 2.9
+# http://sf.net/#PACKAGE#/#PACKAGE#-(.*)\.tar\.gz
+
+# Uncomment to find new files on GooglePages
+# http://example.googlepages.com/foo.html #PACKAGE#-(.*)\.tar\.gz
--- libapache2-mod-authnz-external-3.2.4.orig/debian/libapache2-mod-authnz-external.dirs
+++ libapache2-mod-authnz-external-3.2.4/debian/libapache2-mod-authnz-external.dirs
@@ -0,0 +1,2 @@
+usr/lib/apache2/modules
+etc/apache2/mods-available
--- libapache2-mod-authnz-external-3.2.4.orig/debian/control
+++ libapache2-mod-authnz-external-3.2.4/debian/control
@@ -0,0 +1,23 @@
+Source: libapache2-mod-authnz-external
+Section: web
+Priority: optional
+Maintainer: Hai Zaar <haizaar@haizaar.com>
+Build-Depends: debhelper (>= 7), apache2-threaded-dev (>= 2.2.0)
+Standards-Version: 3.8.2
+Homepage: http://code.google.com/p/mod-auth-external
+
+Package: libapache2-mod-authnz-external
+Architecture: any
+Depends: ${shlibs:Depends}, apache2.2-common
+Recommends: pwauth
+Description: authenticate Apache against external authentication services
+ Mod_Auth_External can be used to quickly construct secure, reliable
+ authentication systems.  It can also be mis-used to quickly open gaping
+ holes in your security.  Read the documentation, and use with extreme
+ caution.
+ .
+ Notably, this module can be used to securely authenticate against PAM 
+ (without exposing /etc/shadow file), using, for example, pwauth
+ authenticator.
+ .
+ This Package includes the mod-athnz-external Module for Apache Version 2.x
--- libapache2-mod-authnz-external-3.2.4.orig/debian/libapache2-mod-authnz-external.docs
+++ libapache2-mod-authnz-external-3.2.4/debian/libapache2-mod-authnz-external.docs
@@ -0,0 +1,2 @@
+AUTHENTICATORS
+README
--- libapache2-mod-authnz-external-3.2.4.orig/debian/authnz_external.load
+++ libapache2-mod-authnz-external-3.2.4/debian/authnz_external.load
@@ -0,0 +1 @@
+LoadModule authnz_external_module /usr/lib/apache2/modules/mod_authnz_external.so
--- libapache2-mod-authnz-external-3.2.4.orig/debian/README.debian
+++ libapache2-mod-authnz-external-3.2.4/debian/README.debian
@@ -0,0 +1,17 @@
+This package can be used with pwauth to provide secure auth against PAM without
+exposing /etc/shadow file.
+
+To use it on Debian, make sure to also pwauth package then add these lines to
+relevant Location or Directory section:
+    AuthBasicProvider external
+    AuthExternal pwauth
+
+And to the related virtual host section:
+   AddExternalAuth pwauth /usr/sbin/pwauth
+   SetExternalAuthMethod pwauth pipe
+
+See these links for more info:
+README file
+http://blog.innerewut.de/2007/6/26/apache-2-2-authentication-with-mod_authnz_external
+http://www.unixpapa.com/mod_auth_external
+
--- libapache2-mod-authnz-external-3.2.4.orig/debian/libapache2-mod-authnz-external.install
+++ libapache2-mod-authnz-external-3.2.4/debian/libapache2-mod-authnz-external.install
@@ -0,0 +1,2 @@
+.libs/mod_authnz_external.so usr/lib/apache2/modules
+debian/authnz_external.load etc/apache2/mods-available
--- libapache2-mod-authnz-external-3.2.4.orig/debian/copyright
+++ libapache2-mod-authnz-external-3.2.4/debian/copyright
@@ -0,0 +1,58 @@
+This package was debianized for Ubuntu by Chuck Short <zulcss@ubuntu.com> on
+Tue, 08 Jan 2008 10:20:36 -0500.
+This package was debianized for Debian by Hai Zaar <haizaar@haizaar.com> on
+Tue, 31 Mar 2009 18:32:20 +0300 based on the work mentioned above.
+
+It was downloaded from http://code.google.com/p/mod-auth-external
+
+Upstream Authors: 
+
+Nathan Neulinger <nneul@umr.edu>
+Tyler Allison    <allison@nas.nasa.gov>
+Dave Woolaway    <dave@watersheep.org>
+Sven Koch        <haegar@sdinet.de>
+Jan Wolter       <jan@unixpapa.com>
+
+
+Copyright: 
+Copyright (c) 1995 The Apache Group.  All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions
+are met:
+
+1. Redistributions of source code must retain the above copyright
+   notice, this list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright
+   notice, this list of conditions and the following disclaimer in
+   the documentation and/or other materials provided with the
+   distribution.
+ 
+3. All advertising materials mentioning features or use of this
+   software must display the following acknowledgment:
+   "This product includes software developed by the Apache Group
+   for use in the Apache HTTP server project (http://www.apache.org/)."
+
+4. The names "Apache Server" and "Apache Group" must not be used to
+   endorse or promote products derived from this software without
+   prior written permission.
+
+5. Redistributions of any form whatsoever must retain the following
+   acknowledgment:
+   "This product includes software developed by the Apache Group
+   for use in the Apache HTTP server project (http://www.apache.org/)."
+
+THIS SOFTWARE IS PROVIDED BY THE APACHE GROUP ``AS IS'' AND ANY
+EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE APACHE GROUP OR
+IT'S CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
+NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ARISING IN ANY WAY OUT OF THE USE  OF THIS SOFTWARE, EVEN IF ADVISED
+OF THE POSSIBILITY OF SUCH DAMAGE.
+
--- libapache2-mod-authnz-external-3.2.4.orig/debian/compat
+++ libapache2-mod-authnz-external-3.2.4/debian/compat
@@ -0,0 +1 @@
+7
--- libapache2-mod-authnz-external-3.2.4.orig/debian/rules
+++ libapache2-mod-authnz-external-3.2.4/debian/rules
@@ -0,0 +1,81 @@
+#!/usr/bin/make -f
+# Sample debian/rules that uses debhelper.
+# This file is public domain software, originally written by Joey Hess. 
+#
+# This version is for packages that are architecture dependent.
+
+# Uncomment this to turn on verbose mode.
+#export DH_VERBOSE=1
+
+build: build-stamp
+build-stamp:
+	dh_testdir
+
+	# Add here commands to compile the package.
+	#$(MAKE)
+
+	touch build-stamp
+
+clean:
+	dh_testdir
+	dh_testroot
+	rm -f build-stamp
+
+	# Add here commands to clean up after the build process.
+	rm -f *.o *.so *.la *.lo *.o *.slo
+	rm -rf .libs
+
+	dh_clean
+
+install: build
+	dh_testdir
+	dh_testroot
+	dh_prep
+	dh_installdirs
+
+	# Add here commands to install the package into debian/<packagename>
+	#$(MAKE) prefix=`pwd`/debian/`dh_listpackages`/usr install
+	apxs2 -c -Wc,-fno-strict-aliasing mod_authnz_external.c
+
+# Build architecture-independent files here.
+binary-indep: build install
+# We have nothing to do by default.
+
+# Build architecture-dependent files here.
+binary-arch: build install
+	dh_testdir
+	dh_testroot
+	dh_installchangelogs
+	dh_installdocs
+	dh_installexamples
+	dh_install
+#	dh_installmenu
+#	dh_installdebconf	
+#	dh_installlogrotate
+#	dh_installemacsen
+#	dh_installcatalogs
+#	dh_installpam
+#	dh_installmime
+#	dh_installinit
+#	dh_installcron
+#	dh_installinfo
+#	dh_installwm
+#	dh_installudev
+#	dh_lintian
+#	dh_undocumented
+	dh_installman
+	dh_link
+	dh_strip
+	dh_compress
+	dh_fixperms
+#	dh_perl
+#	dh_python
+#	dh_makeshlibs
+	dh_installdeb
+	dh_shlibdeps
+	dh_gencontrol
+	dh_md5sums
+	dh_builddeb
+
+binary: binary-indep binary-arch
+.PHONY: build clean binary-indep binary-arch binary install
--- libapache2-mod-authnz-external-3.2.4.orig/debian/changelog
+++ libapache2-mod-authnz-external-3.2.4/debian/changelog
@@ -0,0 +1,21 @@
+libapache2-mod-authnz-external (3.2.4-2.1) unstable; urgency=high
+
+  * Non-maintainer upload by the security team
+  * Fix SQL injection via the $user paramter (Closes: #633637)
+    Fixes: CVE-2011-2688
+
+ -- Steffen Joeris <white@debian.org>  Mon, 18 Jul 2011 10:26:11 +1000
+
+libapache2-mod-authnz-external (3.2.4-2) unstable; urgency=low
+
+  * libapache2-mod-authnz-external does not install the .load file
+    (Closes: #534492)
+
+ -- Hai Zaar <haizaar@haizaar.com>  Fri, 26 Jun 2009 11:08:21 +0300
+
+libapache2-mod-authnz-external (3.2.4-1) unstable; urgency=low
+
+  * Initial release (Closes: #526786)
+
+ -- Hai Zaar <haizaar@haizaar.com>  Sun, 21 May 2009 17:02:00 +0300
+